Magento 1.x Security Patch Notice
For Magento Open Source 1.5 to 1.9, Magento is providing software security patches through June 2020 to ensure those sites remain secure and compliant. Visit our information page for more details about our software maintenance policy and other considerations for your business.
Web
System > Configuration > General > Web
-
Field Descriptions Field
Description
Add Store Code to URLs
Global
If Web Server Rewrites are enabled, inserts the Store Code of the current view in the URL.
Options include: Yes / No
Auto-redirect to Base URL
Global
Redirects traffic to your base URL, rather than to a page with a “404 Page Not Found” message.
Options include:
No
Yes (302 Found)
Yes (301 Moved Permanently)
Do not auto-redirect base URLs for multi-store setups.
-
Field Descriptions Field
Description
Base URL
Store View
The full address of the Magento root folder that is not running over an encrypted (SSL) channel. The base URL must include a trailing slash.
Base Link URL
Store View
A markup tag that represents the unsecure base URL.
{{unsecure_base_url}}
Base Skin URL
Store View
A markup tag that points to the folder where the files for the unsecure site’s skin reside. By default, the folder is called “skin.”
{{unsecure_base_url}}skin/
If your Magento installation has multiple sites that use the same folder structure, you can have a different skin folder for each site. Set the configuration scope to the correct site before entering the base skin URL.
You can also specify a skin folder that resides outside of your Magento installation.
Base Media URL
Store View
A markup tag that points to a folder where the catalog images for this website are located. By default, the folder is called “media.”
{{unsecure_base_url}}media/
If your Magento installation has multiple sites that use the same folder structure, you can have different media folders for each. This gives you the ability to use backup and rollback separately for each media folder.
You can also specify a media folder that resides outside of your Magento installation.
Base JavaScript URL
Store View
A markup tag that points to the folder where the JavaScript files are located. By default, the folder is called “js.”
{{unsecure_base_url}}js/
If your Magento installation has multiple sites that use the same folder structure, you can have a different JavaScript folder for each. This gives you the ability to update the scripts separately.
You can also specify a JavaScript folder that resides outside of your Magento installation.
-
Field Descriptions Field
Description
Base URL
Store View
The full address of the Magento root folder that is running over an encrypted (SSL) channel. The base URL must include a trailing slash.
Base Link URL
Store View
A markup tag that represents the secure base URL.
{{secure_base_url}}
Base Skin URL
Store View
A markup tag that points to the folder where the files for the secure site’s skin reside. By default, the folder is called “skin.”
{{secure_base_url}}skin/
If your Magento installation has multiple sites that use the same folder structure, you can have a different skin folder for each. Set the configuration scope to the correct site before entering the base skin URL.
You can also specify a skin folder that resides outside of your Magento installation.
Base Media URL
Store View
A markup tag that points to a folder where the catalog images are located. By default, the folder is called “media.”
{{secure_base_url}}media/
If your Magento installation has multiple sites that use the same folder structure, you can have different media folders for each. This gives you the ability to use backup and rollback separately for each media folder.
You can also specify a media folder that resides outside of your Magento installation.
Base JavaScript URL
Store View
A markup tag that points to the folder where the JavaScript files are located. By default, the folder is called “js.”
{{secure_base_url}}js/
If your Magento installation has multiple sites that use the same folder structure, you can have a different JavaScript folder for each. This gives you the ability to update the scripts separately.
You can also specify a JavaScript folder that resides outside of your Magento installation.
Use Secure URLs in Frontend
Store View
If your domain has a security certificate, you can choose to run the storefront, with or without SSL encryption. Options include:
Yes
Store URLs begin with “https” to denote a securely encrypted channel.
No
Store URLs begin with “http” to denote a non-encrypted channel.
Use Secure URLs in Admin
Global
If your domain has a security certificate, you can choose to run the store Admin, with or without SSL encryption. Options include:
Yes
Admin URLs begin with “https” to denote a securely encrypted channel.
No
Admin URLs begin with “http” to denote a non-encrypted channel.
Offloader header
Global
The offloader header is used with a load balancer to reduce the load on your server. The processing that is required to run over an encrypted SSL channel can be offloaded to a proxy server, or to multiple servers.
The SSL offloader header includes a message that the channel is secure. Otherwise, the browser might display a warning that the connection is not secure.
The default value is:SSL_OFFLOADED
-
Field Descriptions Field
Description
Default Web URL
Store View
Indicates the landing page that is associated with the base URL. This is set by default to “cms” to indicate a page from Magento’s content management system.
You can also use a different type of landing page, such as a blog. For example, if a blog is installed on the server at magento/blog, you can enter the name of the “blog” folder as a relative path to the selection of pages.
CMS Home Page
Store View
To choose the home page for the store, simply select the CMS page from the list.
By default, the CMS Home Page lists the entire selection of CMS pages that are available for your store.
Default No-route URL
Store View
Contains the URL of the default page that you want to appear when if a 404 “Page not Found” error occurs. The default value is: cms/index/noRoute
CMS No Route Page
Store View
Identifies a specific CMS page that you want to appear when a 404 “Page Not Found” error occurs. The default core content page is “404 Not Found.”
CMS No Cookies Page
Store View
Identifies a specific CMS page that appears when cookies are not enabled for the browser. The page explains why cookies are used, and how to enable them for each browser. The default core content page is “Enable Cookies.”
Show Breadcrumbs for CMS Pages
Store View
Determines if a breadcrumb trail appears on all CMS pages in the catalog. Options include: Yes / No
-
Field Descriptions Field
Description
Cookie Lifetime
Store View
Determines how long a cookie can exist before it is automatically deleted. The default value is set to one hour, in seconds: 3600.
Cookie Path
Store View
Specifies the folders on the server where Magento cookies can be used. To make Magento cookies available everywhere in the installation, set the Cookie Path to a single forward slash: /
Cookie Domain
Store View
Determines if Magento cookies are available to subdomains. For example, to support the following subdomain:
http://subdomain.domain.com/
Enter the name of your domain with a period at the beginning:
.domain.com
Use HTTP Only
Store View
Determines if Magento Cookies can be used only over an unsecure channel (http), or can also be used over an encrypted channel (https). Options include: Yes / No
Cookie Restriction Mode
Website
Determines if Cookie Restriction Mode is enabled. Options include: Yes / No