Have a host, How do I make a portion of the site secure?

schweermo · 11-30-2006, 07:52 PM

Okay, I have a host, but what do I need to do to make a portion of the site secure
like

https://site.com
?

**ToddW** · 11-30-2006, 10:32 PM

You need a certificate for HTTPS.

DO you want that or do you want to just PW protect a directory?

CapsLOCK · 12-01-2006, 06:27 AM

Do you mean SSL? Or what? I need such solution too. Where can I buy any?

fermiop · 12-02-2006, 12:29 AM

As for SSL you may look here: www.positivessl.com

TubHosting · 12-02-2006, 03:12 AM

Hmm, not too sure if you meant by SSL or PW protect certain parts of your site, but if you mean by password protect certain parts of you site, you can do it simply in cpanel:

Password protect in cpanel: http://www.cpanel.net/docs/cpanel/Pa...irectories.htm

Password protect in plesk:
http://www.swsoft.com/en/products/plesk7reloaded/flash/

You can also use .htaccess to protect them too, though it's a little complex
http://www.cs.dal.ca/studentservices...htaccess.shtml

For SSL

http://www.verisign.com/ssl/index.html
http://www.geotrust.com/

Free SSL
https://www.godaddy.com/gdshop/ssl/ssl_opensource.asp (1 year free)
http://www.freessl.com/ssl-certifica...sl/freessl.htm (30 Days free)

schweermo · 12-02-2006, 04:53 AM

I want to secure it and PW protect it.

TubHosting · 12-02-2006, 05:14 AM

do note that securing a server and https is two very different thing.

Https is a method to encrypt information in transit and in no way does it apply to securing a server! By default TCP port would 443 while unsecure would be 80. This SSL certificates can be created via linux using such tools as openSSL If I am not mistaken its free.

Password protect, do you mean to restrict certain portion of your site and using a password as a form of authentication? If you so, you always use .htaccess to configure that kind of stuff.

Now, securing a server. I mean physically securing your server say you have your own dedi box. There alot of factors to take into consideration. Your OS, what level of security you want and such.

It could be as simple as blocking certain ports on your server to a more complex task such as to lock down PHP and use mod_security with apache or securing your TMP partitions.

Hmm don't seem to find a link for you right now on securing your server, will update this post once I do a yahoo later