<![CDATA[Esvon LTD]]> <![CDATA[Can you recommend a few hosting companies that you are certain will have ionCube...]]>
1/ ionCube Loader
2/ Ability to run Cron Jobs
3/ ImageMagick installed - it is not
required but recommended for best thumbnails quality and is needed if you want to handle GIF images resizing
4/ PHP running as Apache module not in safe mode - not required but recommended

If you have no preferences we recommend you choosing a UNIX/Linux server.

In particular, try to have a look at HostingMatters.com (shared/dedicated hosting),
we use them for some websites and are very pleased by server speed and support.

If you would like to use VPS hosting - KnownHost.com has very positive feedback at WebHostingTalk forums.]]> <![CDATA[How can I force secure browsing through HTTPS in Admin Area for all pages?]]> If you have Apache server you can place .htaccess file into /admin/ directory (or its renamed equivalent) with the following lines (use your directory name instead of /admin/ if you renamed it).

If .htaccess file already exists you can add these lines to it unless some of them are already there:

RewriteEngine On
RewriteBase /admin/

RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{SERVER_NAME}/admin/$1 [R=301,L]

]]> <![CDATA[Is there a built-in CSRF tokens mechanism to use with the forms?]]> CSRF means cross-site request forgery. It is a security risk where an attacker can trick a visitor into making a malicious request to your site from another, entirely unrelated site in their control.

Yes, for CSRF tokens in HTML template you can use hidden form field

<input type=hidden name=token value="##TOKEN##">

and hwIsTokenOK() function in corresponding PHP file, e.g.

if($_POST['go'] && hwIsTokenOK()){

  // valid form submission

}

]]>