I am fairly new to PHP and trying to learn how to implement secure forms authentication. I would like to build a site that allows users to login to a page that uses SSL/https. All the other pages in the site, I want to just use http provided that the user has been authenticated. Assuming that I have set up my apache2 server to use SSL, how would I go about doing this (i.e. does the file containing the forms authentication go in one folder while the other files go in another)? Or is there a better way altogether of implementing forms authentication securely in a php site?