{"id":16157,"date":"2023-08-16T12:59:28","date_gmt":"2023-08-16T19:59:28","guid":{"rendered":"https:\/\/membermouse.com\/?post_type=ht_kb&p=8540"},"modified":"2023-08-16T12:59:28","modified_gmt":"2023-08-16T19:59:28","slug":"securiser-votre-site-avec-https","status":"publish","type":"ht_kb","link":"https:\/\/membermouse.com\/fr\/docs\/securing-your-site-with-https\/","title":{"rendered":"S\u00e9curiser votre site avec HTTPS"},"content":{"rendered":"

Afin d'accepter les cartes de cr\u00e9dit sur votre site et d'avoir un minimum d'impact sur l'environnement, il est n\u00e9cessaire de mettre en place un syst\u00e8me de gestion des cartes de cr\u00e9dit.\u00a0Conforme \u00e0 la norme PCI<\/a>\u00a0vous devez disposer d'un certificat SSL et utiliser le protocole HTTPS sur toutes les pages qui recueillent des informations sur les cartes de cr\u00e9dit. HTTPS assure l'authentification de votre site web et du serveur web associ\u00e9, ce qui vous prot\u00e8ge contre les attaques de type \"man-in-the-middle\". <\/p>\n\n\n\n

Additionally, it provides bidirectional encryption of communications between a customer’s browser and your server, which protects against eavesdropping and tampering with and\/or forging the contents of the communication.<\/p>\n\n\n\n

In this article we’ll cover the steps you’ll need to go through in order to ensure your site is secure. This article may also be helpful: http:\/\/www.wpbeginner.com\/wp-tutorials\/how-to-add-ssl-and-https-in-wordpress\/<\/a>.<\/p>\n\n\n\n

<\/div>\n\n\n\n
Acheter et installer un certificat SSL<\/h5>\n\n\n\n

Il existe un certain nombre de soci\u00e9t\u00e9s aupr\u00e8s desquelles vous pouvez acheter des certificats SSL, notamment GoDaddy<\/a>, VeriSign<\/a> et GeoTrust<\/a> to name few. Once you’ve purchased an SSL certificate, you’ll need to work with your hosting provider to get it set up on your server.<\/p>\n\n\n\n

<\/div>\n\n\n\n
V\u00e9rifiez que votre certificat SSL est correctement install\u00e9<\/h5>\n\n\n\n

Once you’ve worked with your hosting provider to get the SSL certificate installed, you can verify that everything is set up correctly by using this V\u00e9rificateur SSL<\/a>.<\/p>\n\n\n\n

<\/div>\n\n\n\n
V\u00e9rifier les param\u00e8tres SSL de WordPress<\/h5>\n\n\n\n

If you’re going to utilize the HTTPS plugin we recommend below then you’ll want to make sure that WordPress isn’t forcing SSL. Do this by going to the\u00a0wp-config.php\u00a0file and checking if\u00a0‘FORCE_SSL_ADMIN’\u00a0is being defined there and if so, make sure it’s set to\u00a0‘false’. Here are\u00a0des instructions d\u00e9taill\u00e9es pour travailler avec le param\u00e8tre SSL de la force<\/a>.<\/p>\n\n\n\n

<\/div>\n\n\n\n
Pages s\u00e9curis\u00e9es sur votre site web<\/h5>\n\n\n\n

Once your SSL certificate has been successfully installed, you’ll want to ensure that HTTPS is used on all the pages on your site that collect sensitive information. This can easily be done with the WordPress HTTPS<\/a> plugin.<\/p>\n\n\n\n

NOTE :<\/strong> If you follow this link you’ll see that the plugin has not been updated in over two years. This is ok. The plugin is doing something very specific and has a narrow focus so updates aren’t required as often as they would be for more complex plugins. Additionally, WordPress HTTPS is a recommendation, not a requirement. There are other WordPress HTTPS plugins available (https:\/\/wordpress.org\/plugins\/search.php?q=https<\/a>). Vous pouvez utiliser n'importe quel plugin qui fonctionne pour forcer l'utilisation de HTTPS sur votre site.<\/p>\n\n\n\n

IMPORTANT :<\/strong>\u00a0Apr\u00e8s avoir activ\u00e9 le plugin WordPress HTTPS, allez dans l'\u00e9cran des r\u00e9glages et dans la section\u00a0Param\u00e8tres g\u00e9n\u00e9raux<\/em>\u00a0s'assurer que la section\u00a0Forcer le SSL en exclusivit\u00e9<\/em>\u00a0n'est pas coch\u00e9e. Lorsque cette option est coch\u00e9e, le plugin HTTPS de WordPress modifie accidentellement l'URL des formulaires de paiement de MemberMouse pour qu'elle ne soit pas s\u00e9curis\u00e9e. Dans certains navigateurs, un message d'avertissement s'affiche lorsque les clients tentent d'envoyer le formulaire de paiement. Pour \u00e9viter ce probl\u00e8me, assurez-vous que l'option\u00a0Forcer le SSL en exclusivit\u00e9<\/em>\u00a0n'est pas coch\u00e9e, comme indiqu\u00e9 ci-dessous :

\"\"

<\/p>\n\n\n\n

Vous voudrez \u00e9galement ajouter des filtres d'URL pour le script de processus php que MemberMouse utilise pour les transactions. Ces filtres peuvent \u00e9galement \u00eatre ajout\u00e9s dans la section Filtre d'URL. Vous devez ajouter les URL suivantes :<\/p>\n\n\n\n

\/wp-content\/plugins\/membermouse\/api\/processOrder.php<\/p>\n\n\n\n

\/wp-content\/plugins\/membermouse\/scheduler\/handler.php<\/p>\n\n\n\n

Et si vous utilisez le Social Login : \/wp-content\/plugins\/membermouse\/endpoints\/auth.php

\"\"

<\/p>\n\n\n\n

Ensuite, allez sur chaque page qui doit \u00eatre s\u00e9curis\u00e9e et cochez les cases suivantes\u00a0Poste s\u00e9curis\u00e9<\/em>\u00a0dans le\u00a0HTTPS<\/em>\u00a0module. You’ll want to do this for the MemberMouse Checkout and My Account core pages and any page you’ve included a MemberMouse checkout form on.

\"\"<\/p>\n\n\n\n

<\/div>\n\n\n\n
Veillez \u00e0 ce que vos pages soient enti\u00e8rement s\u00e9curis\u00e9es<\/h5>\n\n\n\n

Once you’ve installed a plugin to handle HTTPS and you’ve configured which pages should use HTTPS, you’ll want to check and make sure there aren’t any insecure items being loaded on your secure pages as this will typically cause the browser to show a warning to the user informing them that the page is not secure. <\/p>\n\n\n\n

In some browsers, like Chrome, they’re more strict and will terminate rendering the page when an insecure item is encountered. You can\u00a0utilisez cet outil pour vous assurer que vos pages sont enti\u00e8rement s\u00e9curis\u00e9es<\/a>. Si le rapport vous indique que vous avez des \u00e9l\u00e9ments non s\u00e9curis\u00e9s sur votre page,\u00a0utiliser cette ressource pour corriger les \u00e9l\u00e9ments non s\u00e9curis\u00e9s<\/a>.<\/p>\n\n\n\n

<\/div>","protected":false},"excerpt":{"rendered":"

Afin d'accepter les cartes de cr\u00e9dit sur votre site et d'\u00eatre un minimum conforme \u00e0 la norme PCI, vous devez disposer d'un certificat SSL et utiliser HTTPS sur toutes les pages qui recueillent des informations sur les cartes de cr\u00e9dit. HTTPS...<\/p>","protected":false},"author":20918,"comment_status":"open","ping_status":"closed","template":"","format":"standard","meta":{"_acf_changed":false,"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"footnotes":""},"ht-kb-category":[222],"ht-kb-tag":[],"class_list":["post-16157","ht_kb","type-ht_kb","status-publish","format-standard","hentry","ht_kb_category-resources-articles"],"acf":[],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t