Secure Checkout process

How do I create a secure checkout process? ie. using https with PowerStore.

I know you have to buy a security certificate from your host, correct? (does it have to be from the hosting provider that is used by the site, or can it be from anyone that sells them, ie. godaddy).

Thanks

For the second question, you don't have to buy the ssl certs from your host. I've had good luck with these guys:
rapidssl-certificates.php

Cheaper than most and it's a single root certificate that's recognized by all the popular browsers out of the box. I've been able to transfer them from one host to another without any hassle at all. They have a good support section on the site whether your a customer or not.

You probably wont be able to purchase the certificate from GoDaddy, unless they are your host. The certificates that they sell are to be installed on their server. There are other vendors that can be used however, you just need to make sure the certificate is installed on your server.


The simplest way to convert power store to using the SSL Site, is to configure the $WAGLOBAL_Root_URL to use the https server:
$WAGLOBAL_Root_URL = "https://mysite.com/store/"

Really? Why would I want the whole site on Https ?

I only want the checkout process to be secure. Is this possible? (I know it's possible - but how difficult and how do I do this?)

Thanks!

Originally Said By: Jason Byrnes

  You probably wont be able to purchase the certificate from GoDaddy, unless they are your host. The certificates that they sell are to be installed on their server. There are other vendors that can be used however, you just need to make sure the certificate is installed on your server.


The simplest way to convert power store to using the SSL Site, is to configure the $WAGLOBAL_Root_URL to use the https server:
$WAGLOBAL_Root_URL = "https://mysite.com/store/"  

See this thread:
showthread.php?t=1860

Ah - thanks for pointing me to that thread.

Where would I change it back to http after they purchase something? (he/she mentions that just changing the url to point to https when checking out works fine, but afterwards they stay in https) - so at what point or at what file would I change it back to http?

thanks!

Just guessing here, but I think you could do it when sending them to the checkout_success page.

I wouldn't think it would be a problem because they have already completed a transaction and it isn't that likely they would continue shopping.

The bandwidth hit with encrypted pages isn't as important anymore with fast servers and easy access to fast connections.