Without an ssl certificate, when you log in to the manager your username and password are sent in plain text across the internet.
A hacker with sniffing tools could intercept them, login to your site, and do what they want.
The shared linux hosting I use provides a shared ssl certificate so I could redirect
http://mysite.com/manager to
https://hosting-machine.com/~username/mysite.com/manager
This worked well with Evolution ( some of the time, some third party modules wouldn't play )
I tried doing this with Revolution, and with some alteration to config.core.php I could get the manager to start up but it broke the main plugin I was using and trying to get that to work just seemed impossible, and generally this would make upgrading a real hassle.
I read that Revolution supports putting the manager context in a defined location. How could that help?
How do people protect their manager username and password?
Do you buy SSL certificates for every site you build?
Or do people just keep their fingers crossed and hope for the best !?
Any help or suggestions much appreciated.
Mike
