At the moment I have a website running in quite an insecure way, I'll refer to it as example.com.
To add better security we're starting to store passwords using
bcrypt but we are currently not using SSL so they could be viewed upon submission.
When setting up SSL and purchasing the certificate should the hostname be example.com if that's the only place you wish to use SSL?
Say we only want logged in members to use SSL then would PHP scripts need changing in some way and from an SEO aspect is
http:// any different to
Would the site work as
https://example.com/index.php because this would be bad having multiple instances of one thing?
I'm very new to SSL security and not quite sure I'm grasping the concept of it correctly at the moment? We basically want the login forms and members part of the site use SSL.