adding to cart does nothing.

You have something wrong somewhere ... this is breaking the logic of the current session so things are working and not working in unusual ways ...

If you navigate around your site and get to the add to cart/buy now from various locations using various navigation, things are not working right ...

First, I should go to your shop and never see a secure URL until I try to Login or Checkout ... but I am seeing them incorrectly change just by navigating around your site using links and images and listings etc. etc.

Not even touching Login or Checkout ... I see the secure URL appearing and disappearing ...

The first thing to look at is the configure.php file, from the server, without your username and password, at:
/includes/configure.php

There could be something set up incorrectly on it ...

Maybe I am missing something, Ajeh, but why do you say that someone should not see the secure URL except upon trying to register or login? This particular site...the ENTIRE domain has been secured, rather than just a page or two. Maybe ZenCart cannot deal with that, but I have seen numerous websites in which the entire domain was an https secure site.

That is not to say that there is not a problem on my site. But I can't understand why it would pertain to the security.

Ajeh,

One more thing I should mention: There are, I believe, 2 config files showing the site URL...one in admin and one elsewhere. In one of those files, the notes give instructions to enter both the HTTP and HTTPS URL's as HTTP.

I followed those instructions in BOTH config files, and maybe that was incorrect. What do you think???

Let's do a click for click ...

Go to your site ... via your non-secure URL ...

You are suddenly on a secure URL ...

Point at Privacy and you will see it should go to a non-secure URL ...

Click Privacy ...

You are on a secure URL ...

Point at Privacy and you will see it should go to a non-secure URL ...

Click Privacy again ...

You are on a secure URL ...

Point at All Products and you will see it should go to a non-secure URL ...

Click All Products ...

You are suddenly on a secure URL ...

Notice we have not tried yet to actually go to a secure URL but we are being taken to secure URLs where we should not, despite the fact when you mouse over the links they show non-secure URLs ...

This means something is not setup right ...

Seeing the file, from the server, without your username and password, for:
/includes/configure.php

might help determine what is going on here, if it is a configuration issue ...

Ajeh,

When you say, "Point here or there and you should go to a non-secure site...", that was not MY doing, unless it is a consequence of the configure.php files, one or the other of them.

As far as I am concerned, EVERY page should be secure. In the rest of my website, it doesn't matter what the URL shows as, when you point to it...you go to the correct page, but always prefaced by https and it doesn't matter what it was called in the html source.

ONLY ZenCart has a problem with this. But, again, I never entered http as a preface for the privacy and other pages that were provided as part of the basic ZC installation. ZenCart did this. I only modified the content of those pages. I never named or renamed them unless, again, it was a consequence of the URLs in the configure files.

My question has not been answered: The configure page in the admin folder specifically says to name both the http and https locations AS https. I did the same thing in the other configure file as well. (In other words, as far as I know, every URL in the configure files are called "https". Was that incorrect?

Thanks

Ajeh,

I checked the two configure.php files and I was wrong! The configure file NOT in the Admin Includes directory was NOT showing the non-http URL AS https. It had been previously. But, when I could not get this this to work...obviously for some other reason...I must have changed it to http.

Now, I have made all URLs prefaced with https and the Add to Cart button IS working...at least for now!

Thanks for the help.

Post your includes/configure.php without your passwords.

Kim,

I am good now. I had assumed that, as it stated in the Admin configure.php file...when an entire site is secure, all URLs, http or https, should be entered in the configuration as https.

However, when this was not working before, I had, apparently, changed the http URL in the NON-admin configure file from https to http. Obviously, at the time, the problems was from somewhere else...because, as soon as I made all URLS "https" again, in admin and the non-admin includes directories, I was fine.

Thanks for the help.

Thanks for the update that the issues were due to incorrectly configured settings in your configure.php file ... :smile:

Ajeh,

Thanks for jumping in on this and offering what help that you could. I appreciate it.

One comment, however: I would suggest that you comment the non-admin configuration file, in the distribution package, to note that, when an entire site is an https/secure site, all URLs should be configured in the file as https...just like the comments in the admin config file. (In effect, in that case, there ARE no http URLs.)

I was only able to correct the problem by assuming that those comments, in the admin config file, applied to the non-admin file as well. Unfortunately, at some point. I had changed the http URL from https back to http...inadvertently while trying to pin down the problem. But, it turned out that my suspicion that, when an entire domain being secured by an SSL certificate, all URLS, in all config files, should be identified as https, was correct.

Thanks, again, for the help. You folks really go above and beyond the call of duty!