Securing Drupal Pages

In order to secure Drupal pages with SSL, use the Secure Pages module (http://drupal.org/project/securepages) which allows you to set this in the Drupal admin area.

This module has been installed into both Drupal 5 and Drupal 6 versions of the “vanilla” template installations.

To configure once activated, go to the admin area, under Site Configuration -> Secure Pages at:

admin/settings/securepages

(Instructions valid for version 5, but should be very similar for version 6.)

  • UNDER: Enable Secure Pages:
    ◦ SELECT: Enabled
    ◦ SELECT: Switch back to http pages when there are no matches.
     
  • UNDER: Pages which will be be secure:
    ◦ SELECT: Make secure only the listed pages.
     
  • UNDER: Pages:
    ◦ ADD:

        node/add*
        node/*/edit
        user/*
        admin*
        cart*

(This protects login screens, all admin screens, content manipulation and Ubercart checkout.)

  • UNDER: Ignore pages:
    ◦ ADD:

        */autocomplete/*