HTTP & HTTPS

[ozzy47]

I am looking into getting a SSL, to cover my store script.

Now once I get it, can I still use HTTP for my whole site, and only use the HTTPS for the store?

Meaning I would only use the HTTPS in the PayPal return url:

$dbt_vbd_ppurl .= '&return = https//MYSITE.com/store_payments.php?do=thankyou';

Instead of:

$dbt_vbd_ppurl .= '&return='.$vbulletin->options['bburl'].'/store_payments.php?do=thankyou';

[Zachery]

If you're sending the data off to paypal, why use SSL at all? Are you storing customer billing or personal information?

[ozzy47]

No, but when they return to my thank you page, before they go they get that message. Only think I am storing is username, userid, product, transaction id amount and date.

[Zachery]

I don't see a strong reason to do SSL, unless you just want to be extra secure. If you're not storing any personal data, and letting all of the transactions take place on paypals end, SSL seems like a bit of overkill.

[ozzy47]

True, but novice users may get leery when they see that message pop up, so I am trying to make them feel as secured as possible.

[Zachery]

Which message?

[ozzy47]

Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.

Are you sure you want to continue sending this information?

[dizzynation]

Yes it is possible, we use https for checkout then return to http for regular use. Its not for a vbulletin site, its pure html site, I will message one of my coders and see the steps needed.

[ozzy47]

I am pretty sure If I just tell PayPal to redirect to

https//MYSITE.com/store_payments.php?do=thankyou

and leave all the settings in the ACP alone in theory it should work, but I need confirmation.

[blind-eddie]

Why not set it up in a paypal sand box to test your theory.