Page 1 of 1
secure website
Posted: Wed Feb 07, 2007 12:42 pm
by maneeshthareja
Hi all
This is my first message on this forum.
Well I have developed a web project in PHP MySQL Apache for the state goverment.
Now it is going for auditing.
Now the problem is that it is running on HTTP and they want to make this site secure by running on HTTPS .
So can you help how can i do it with HTTPS and what are the steps to do it because before this i never use https or SSL.
Please reply everything
Posted: Wed Feb 07, 2007 8:23 pm
by volka
Posted: Wed Feb 07, 2007 8:24 pm
by Ambush Commander
You will need to get a cert and set up Apache to use it. It's not too difficult, try googling it up:
http://www.google.com/search?q=apache%20ssl%20howto
Note that a cert from a reputable provider will cost money, if you choose to self-sign, users will get a nice warning message.
Posted: Thu Feb 08, 2007 11:47 am
by maneeshthareja
hello sir
thanx alot but i am still confuse how to implement security in my web site.
and suppose i implement ssl in my web site in that case should i make changes in my all pages...
please clarify this....
and because i am making a site for state government should i bought any certificate or anything else and what would be it cost ....
till then i am reading the link u given me
thank you
Posted: Thu Feb 08, 2007 1:13 pm
by Ambush Commander
The only changes you would have to make are changing links from using http:// to https:// (not necessary for relative links like "foo.gif"). Other than that, Apache should handle it. You should probably have your web pages ensure that the connection is indeed HTTPS, and if it isn't, redirect the user to the right spot.
As for certificate cost, I don't know off the top of my head, but VeriSign seems to sell them at
http://www.verisign.com/ssl/buy-ssl-cer ... or higher, prices are lower if you buy for multiple years and more advanced certs can go for $1.5k. Not cheap, but then again, this is the state government you're talking about. In fact, they should probably already have an SSL cert.