Protecting pages with LemonStand

0 | published by Aleksey B. on Monday, September 21, 2009

Protecting pages is a very simple task in LemonStand. For any page you can ask LemonStand to force HTTPS protocol for the page, or to allow only registered and logged in customers to access the page.

Forcing HTTPS protocol

Some pages of an online store must be accessible only through the HTTPS protocol. Examples of such pages are payment pages, customer account pages and checkout pages. LemonStand can force visitor's browser to switch to HTTPS protocol for any page. Of course, an SSL certificate must be installed on the server though. By default all pages could be accessed through both HTTP and HTTPS protocol. To force HTTPS protocol, just select HTTPS only item in the Allowed Protocol drop-down menu in the Page Editor.

Managing page access mode

In LemonStand you can configure a page access mode in such a way that only registered and logged in customers can access the page. This feature enables you to create protected pages, or secure zones, accessible only by customers. You may want to restrict guest access for pages like

a list of customer orders
order details page
change password page

In the same way LemonStand allows you to restrict access to specific pages for logged in customers. You may want to use this feature for such pages as customer login page, password restore page and others.

To configure a page access mode, select a suitable item in the Access list in the Page Editor. If you choose Customers only or Guests only access mode, you also need to select a page to redirect visitor's browser to, in case if the visitor has no rights to access the page.