Shouldn't ALL the pages say https:// ?

[CultureClick]

My God what a struggle. I got PayPal, first the Express Payment as a pre-requisite to Payments Pro. I got an SSL cert. I went through hell getting my hosting company to enable it. I changed the two configure.php files as recommended, and was FINALLY able to enable PayPal Website Payments Pro. Okay, goody.

Now I am confused.

1) Shouldn't it be impossible to go to http://www.mysite now? Shouldn't it just automatically go to https://www.mysite?

2) Should only the home page and the checkout page be https? Or should ALL pages be https?

Have a look at my site! It's https://www.madwomanofeasthampton.com

I thank you in advance!

Yours,

Culture Click

[CultureClick]

When I click on "Home" it goes back to http:// . Even though I started from https:// .

::sigh::

[CultureClick]

Oh. In the "configure.php" files, it's not the way the instructions say. Instead you have to change every http to https. So look at my page and tell me, does it look right to you?

[Ajeh]

Why are you running your whole site as secure?

By not using the secure on the defines for HTTP_ you will get the secure when you need them ... on the HTTPS_

[CultureClick]

Why are you running your whole site as secure?

I'm not trying to.

By not using the secure on the defines for HTTP_ you will get the secure when you need them ... on the HTTPS_

Uhhhh... what? That wasn't especially clear. The problem was first getting it https at all, and then the problem was that when I went back to the home page, it went back to http and not https.

Thank you!

Culture Click

[DrByte]

1) Shouldn't it be impossible to go to http://www.mysite now? Shouldn't it just automatically go to https://www.mysite?

Both should be possible.
SSL/https is only needed on pages which handle sensitive information.

2) Should only the home page and the checkout page be https? Or should ALL pages be https?

SSL is generally only used on the checkout and login/my-account pages. On the storefront nothing else handles "sensitive" information.

[CultureClick]

Okay. So what should the includes/configure.php and the zc_admin/includes/configure.php actually look like?

Thanks!

Culture Click

[DrByte]

Just like the SSL FAQ article says:

1. Start with the working set of files from before you touched anything about SSL. Always good to keep regular backups ;)

2. Then for your ADMIN configure.php file:
- HTTPS_SERVER setting needs to be your SSL URL
- HTTP_SERVER needs to be set to the same as your HTTPS_SERVER setting (so your admin can be entirely SSL, since it's very often dealing with sensitive info)
- ENABLE_SSL_ADMIN true

3. For your non-admin configure.php file:
- HTTPS_SERVER needs to be your SSL URL
- HTTP_SERVER needs to be the normal http:// address of your site
- ENABLE_SSL true

Hopefully you've not touched any of the DIR_WS_xxxxxxxx or DIR_FS_xxxxxx settings at all

[CultureClick]

A belated THANK YOU! http://www.madwomanofeasthampton.com looks right, now, from the SSL perspective anyhow. And it is now functional.

I really, REALLY appreciate the time that folks here take to answer questions.

Sincerely,

Culture Click the Toddler Zenner

[DrByte]

Glad it's working for you now!