Light Box.. after insall asking for Secuity question

[imfsub12]

Yes i just installed the light box on my site.. as i love the lightbox stuff..

But now when i installed it.. when i go to a category it comes up with the Security Question box - this page contains secure and non secure items do you want to see the non secure items..

Not sure why this is popping up now.. kind of begging the hell out of me i might have to uninstall it and go back to my old DB..

AHHHHH

please check out http://saltwaterconnection.com

[fairestcape]

- this page contains secure and non secure items do you want to see the non secure items..

So just call up that page again, and when it asks the security question, say NO -Don't display the non-secure items.

You will then see image (or file) place holders, instead of the "insecure" material.

This will indicate what items are not going through HTTPS, and all you need do is change their URL in the code, from HTTP to HTTPS.

[imfsub12]

why did this just start with the lightbox?

[fairestcape]

... or alternatively, you have instructed everything to load HTTPS somehow. (Check your configure.php files, or any possible setting in lightbox that required HTTP).

Zencart does not apply HTTPS globally when you install SSL. It only goes into HTTPS when sensitive data is being transmitted. For the most part, it operates HTTP and invokes HTTPS only when necessary.

[imfsub12]

ya i did the ssl security... like the help told me to.. this is in the include/config.php

// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg-http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg-https://www.yourdomain.com
define('HTTP_SERVER', 'https://saltwaterconnection.com');
define('HTTPS_SERVER', 'https://saltwaterconnection.com');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

and this is in the admin

* If you desire your *entire* admin to be SSL-protected, make sure you use a "https:" URL for all 4 of the following:
*/
define('HTTP_SERVER', 'https://saltwaterconnection.com');
define('HTTPS_SERVER', 'https://saltwaterconnection.com');
define('HTTP_CATALOG_SERVER', 'https://saltwaterconnection.com');
define('HTTPS_CATALOG_SERVER', 'https://saltwaterconnection.com');

// secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');

Did i do this wrong??? i just followed the faq's

[imfsub12]

i think i sort of figured it out i changed.. the include/config..

the first define HTTP i took out the HTTPS and it seems to work.. but my site still is secure when they login and check out.. perfict. .any more help on this would be great..

[fairestcape]

define('HTTP_SERVER', 'https://saltwaterconnection.com');

Precisely... This is asking you for the HTTP server, so why are you putting https

And you've done the same further down.

[imfsub12]

for the admin section it says to do all 4 https

define('HTTP_SERVER', 'https://saltwaterconnection.com');
define('HTTPS_SERVER', 'https://saltwaterconnection.com');
define('HTTP_CATALOG_SERVER', 'https://saltwaterconnection.com');
define('HTTPS_CATALOG_SERVER', 'https://saltwaterconnection.com');


but in the include/config.php i have done this NOW

// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg-http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg-https://www.yourdomain.com
define('HTTP_SERVER', 'http://saltwaterconnection.com');
define('HTTPS_SERVER', 'https://saltwaterconnection.com');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

is this right??

[fairestcape]

for the admin section it says to do all 4 https

define('HTTP_SERVER', 'https://saltwaterconnection.com');
define('HTTPS_SERVER', 'https://saltwaterconnection.com');
define('HTTP_CATALOG_SERVER', 'https://saltwaterconnection.com');
define('HTTPS_CATALOG_SERVER', 'https://saltwaterconnection.com');


but in the include/config.php i have done this NOW

// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg-http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg-https://www.yourdomain.com
define('HTTP_SERVER', 'http://saltwaterconnection.com');
define('HTTPS_SERVER', 'https://saltwaterconnection.com');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

is this right??

LOOK CAREFULLY !!!

Where it says:

HTTP_SERVER do NOT put https://

[Website Rob]

fairestcape, it is correct within the Admin config file to use 'https' for all 4 HTTP settings.

This does not affect the front-end but does allow 'https' connections to be used within all areas of the Admin section. By default, Zen Cart only uses 'https' for the Admin login page.


imfsub12, your config settings are fine and should work correctly. If you still have problems / errors then clear your Browser cache. If using any versions of Windows OS then just: CTRL + F5 to clear.