This question already has an answer here:

I have to maintain a Magento 1.9 e-commerce website.

I can see that URL is hard coded in database

  • web/secure/base_url
  • web/unsecure/base_url

Why this is recommanded ?

What could be unsecure to use {{base_url}} ?

marked as duplicate by Keyul Shah, Siarhey Uchukhlebau, Murtuza Zabuawala, Fabian Schmengler, Amit Bera May 10 '17 at 16:14

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.


Each website in a Magento installation has a base URL that is assigned to the storefront and to the Admin. If you have a security certificate for your domain, you can configure either, or both base URLs to operate over a securely encrypted SSL channel. Unsecure base URLs begin with “http,” and secure base URLs begin with “https.”

Unsecure Base URL: http://www.yourdomain.com/magento/

Secure Base URL: https://www.yourdomain.com/magento/

URL with IP address:

If Magento was installed before you registered a domain, the base URL might include the IP address of the server. If you don’t yet have security certificate, the store will not be able to switch to secure URLs (https) for transactions that normally take place over the secure socket layer (SSL). These configuration settings can be updated later to reflect the values you need before the store “goes live.”

Source: Magento

  • in fact, my question was more, whats are pros_/_cons between using a fixed (in database) web/secure/base_url and using {{base_url}} (in database) – waghanza May 10 '17 at 9:07

Not the answer you're looking for? Browse other questions tagged or ask your own question.