Page 1 of 1
Disable secure pages in the Admin
Posted: Wed Aug 27, 2008 9:51 am
by Mike718NY
Is it possible to disable secure pages from being used in the admin?
https://www.website.com/Admin/Default.aspx
It adds overhead and slows the pages down.
Re: Disable secure pages in the Admin
Posted: Wed Aug 27, 2008 10:45 am
by AbleMods
Remove this line from the ~/App_Data/AbleCommerce.config file below the <securePages> tag. I believe that's all that is required although I wouldn't recommend it at all - any payment information viewed could be easily compromised by even the most novice packet sniffer.
Code: Select all
<add path="Admin" recurse="true" />
If performance is an issue, get a better host or more bandwidth instead of risking your business reputation. One is far more costly than the other in the long run.
Re: Disable secure pages in the Admin
Posted: Wed Aug 27, 2008 10:57 am
by Mike718NY
Thanks Joe,
yeah, I'm only paying $30.00 a month. Sometimes the site runs fast, but
other times pages could take over 40 seconds or more to load.
I would be willing to pay more for faster performance.
Re: Disable secure pages in the Admin
Posted: Fri Aug 29, 2008 10:18 am
by Mike718NY
I found a way to get around not using Secure pages for Credit Card info:
<files>
<!-- added these 2-->
<add path="Admin/Login.aspx" />
<add path="Admin/Orders/Payments/Default.aspx" />
<add path="Login.aspx" />
....
I also added admin login as secure. The admin is much faster now.