Results 1 to 3 of 3
  1. #1
    Join Date
    Apr 2014
    Location
    Virginia
    Posts
    15
    Plugin Contributions
    0

    Default Admin Login Clear Text after SSL installation

    Hi,

    I purchased an SSL certificate and I have all pages being redirect to https.

    When I log into the admin page, I get a dialog box stating the following.

    Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.

    Are you sure you want to continue sending this information?

    I see the problem is that the form action is not being populated with the https version of the URL.
    This line is not working right

    echo "zen_href_link(FILENAME_PASSWORD_FORGOTTEN, '', 'SSL');"

    How do I turn this on? BTW:

    // Use secure webserver for checkout procedure?
    define('ENABLE_SSL', 'true');

    Thanks
    Last edited by juggernautsei; 8 Dec 2014 at 05:52 PM.

  2. #2
    Join Date
    Feb 2012
    Location
    mostly harmless
    Posts
    1,809
    Plugin Contributions
    8

    Default Re: Admin Login Clear Text after SSL installation

    Have you updated your configure.php files to reflect the forced use of HTTPS for all pages?

    Please post all of your configure.php files (obscure the db info) using code tags (the # button in the editor).

  3. #3
    Join Date
    Jan 2004
    Posts
    66,364
    Blog Entries
    7
    Plugin Contributions
    274

    Default Re: Admin Login Clear Text after SSL installation

    For the ENABLE_SSL defines to have any effect:
    1. storefront configure.php needs HTTPS_SERVER to have your new SSL URL in it.
    2. admin configure.php needs the SSL URL in both the HTTP_SERVER and HTTPS_SERVER defines.

    AND REMEMBER: The 2 configure.php files do look similar, but the admin side has several differences from the storefront side, so don't mix the files up.

    ALSO: the configure.php files get set to read-only on the server, so if you "thought" you made changes but they didn't "take" it could be that you need to make the files writable before changing their contents.

    All explained in the FAQ article on the subject: http://www.zen-cart.com/content.php?...alled-zen-cart
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

 

 

Similar Threads

  1. Can't find admin login page after new installation
    By Solfant in forum Installing on a Linux/Unix Server
    Replies: 4
    Last Post: 17 Jun 2015, 05:17 PM
  2. v153 Can't login to admin after SSl was disabled, How to restore admin access?
    By alpheus in forum Installing on a Linux/Unix Server
    Replies: 8
    Last Post: 20 Dec 2014, 09:34 PM
  3. Admin Tool Kit - yields error after SSL installation
    By cyberbaffled in forum General Questions
    Replies: 8
    Last Post: 10 Jul 2014, 08:24 PM
  4. Replies: 8
    Last Post: 29 Mar 2011, 03:53 AM
  5. Users cant login after SSL installation
    By franzmeyer in forum General Questions
    Replies: 0
    Last Post: 8 May 2009, 06:18 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg
Zen-Cart, Internet Selling Services, Klamath Falls, OR