We had, like others, a problem in the integration of SSL.
We have pages where personal information are transferred.
Therefor is SSL for a secure transmission very important.
We are using following solution:
Copy the entire files from /inc into a directory, e.g. /inc2
There change in the header.inc.php the site path from http://domainname to https://domainname.
Now change in all pages to be accessed via SSL the call of the header.inc.php from ....inc/header.inc.php in ....inc2/header.inc.php.
Then, as already described in other forums e.g.
http://www.boonex.com/unity/forums/topic/SSL-Dolphin-.htm,
add the following code to the .htaccess, so the call to the sites converted to https.
RewriteRule "^(pedit.php)$" - [env=whwSecure:https]
RewriteRule "^(join.php.*)$" - [env=whwSecure:https]
Add here every page for SSL
#Redirect to normal site.
RewriteCond %{HTTPS} on
RewriteCond %{env:whwSecure} !https
RewriteCond %{REQUEST_URI} !^.*simg.php
RewriteCond %{REQUEST_URI} ^.+.php [OR]
RewriteCond %{REQUEST_URI} ^.+/$
RewriteRule "^(.*)$" "http://%{HTTP_HOST}/community/$1" [R=301,L]
#Redirect to Secure site
RewriteCond %{HTTPS} off
RewriteCond %{env:whwSecure} https
RewriteRule "^(.*)$" "https://%{HTTP_HOST}/community/$1" [R=301,L]
Done!
With this solution, the pages are accessed via https and all pathes within the files are also changed to https.
