Improved admin panel security + CMYK for vector issue fixed

IMPROVED ADMIN PANEL SECURITY
RTD is growing, and it's time to get slightly more paranoid.
From now over, login to admin panel will be forced into a secured SSL connection.
Admin panel itself will still be plain http protocol, to avoid slowdowns: but when you are in the login page and you perform the login (so, when you send sensible data as you password), the connection will be encrypted.
Basically, the new flow is:

login page - HTTPS protocol
login verification - HTTPS protocol
if login succesfull, redirect to admin panel with normal HTTP protocol

Also, there are some sections of the admin panel that will be SSL as well from now over.
You can identify them because we placed a pair of locks on top of secured pages.
For the time being, the other secured pages are:

Manage Admin Users
Change Your Password
Manage API Credentials
Online Payment Systems Setup

If you feel more will be needed, just let me know.

CMYK VECTOR ISSUE FIXED
It seems that having raster cliparts in your library saved as CMYK files could create corupted vector files when you generate those (crashing Corel, Illustrator, or whatever you might be using).
To fix that, the golden rule is always to upload in RTD only RGB cliparts. But even in case you didn't, now the vector output will convert the CMYK to RGB on the fly is CMYK is detected, to avoid issues.
In any case being sure not to have CMYK cliparts uploaded would be better, because this extra step will result in slightly more time to create the vector.



Edited 1 time(s). Last edit at 12/12/2012 08:10PM by Alex.

An extra note about security:
also the RTD API can be used under SSL, if you feel so. But consider it may be slightly slower.

The regular API page is:

http://designer.realtimedesigner.com/api.php

You just need to call it in its SSL version, so:

https://designer.realtimedesigner.com/api.php

In case you're using our reference files, you'd need to edit the functions.php one it this way:

CHANGE

$API_page = "http://designer.realtimedesigner.com/api.php";

TO

$API_page = "https://designer.realtimedesigner.com/api.php";

CHANGE

$ch = curl_init();
curl_setopt($ch, CURLOPT_URL, $API_page);

TO

$ch = curl_init();
curl_setopt($ch, CURLOPT_SSL_VERIFYPEER, FALSE);
curl_setopt($ch, CURLOPT_SSL_VERIFYHOST, FALSE);
curl_setopt($ch, CURLOPT_URL, $API_page);

Other extras.
Some new area of the admin panel are now secured.
List is uploaded in the first post.