I think I found the problem and (hopefully) the correct solution.
What happened is that I SSL-ed the whole website using rewrite in the .htaccess. That means everything is encrypted even for those you only view the website.
It worked fine with Zen Cart 1.3.7. Apparently it doesn't work with Zen Cart 1.3.8.a.
So the fix I made is to disable the automatic rewrite in the .htaccess under the new installation 1.3.8.a. directory. Therefore, the website is not encrypted when people are viewing. However, the user login and admin login are encrypted. It is automatically redirected to https:// by zen cart.
Regards,
Tukang.



