Help! Just got https Now everything is messed up!

[hello]

I am using v1.3.9b

Everything was fine. Now I installed the https and I can't add things to my shopping cart! I get this message when I add something:

Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.

Are you sure you want to continue sending this information?

Why is it saying this when everything is supposed to be secure?

Now It doesn't recognize my account that I set up earlier! I did a resend password and it says the email address is not on file.. it is! I also try to create a new account and it keep on bouncing to the same sign up page!

Did I set up the https wrong? Some don't have https: is that ok, I just follow the ssl instructions.

This is the Admin Configure.php

// Define the webserver and path parameters
// Main webserver: eg-http://www.testingmysite1bc.com -
// HTTP_SERVER is your Main webserver: eg-http://www.testingmysite1bc.com
// HTTPS_SERVER is your Secure webserver: eg-https://www.testingmysite1bc.com
// HTTP_CATALOG_SERVER is your Main webserver: eg-http://www.testingmysite1bc.com
// HTTPS_CATALOG_SERVER is your Secure webserver: eg-https://www.testingmysite1bc.com
/*
* URLs for your site will be built via:
* HTTP_SERVER plus DIR_WS_ADMIN or
* HTTPS_SERVER plus DIR_WS_HTTPS_ADMIN or
* HTTP_SERVER plus DIR_WS_CATALOG or
* HTTPS_SERVER plus DIR_WS_HTTPS_CATALOG
* ...depending on your system configuration settings
*
* If you desire your *entire* admin to be SSL-protected, make sure you use a "https:" URL for all 4 of the following:
*/
define('HTTP_SERVER', 'https://testingmysite1bc.com');
define('HTTPS_SERVER', 'https://testingmysite1bc.com');
define('HTTP_CATALOG_SERVER', 'https://testingmysite1bc.com');
define('HTTPS_CATALOG_SERVER', 'https://testingmysite1bc.com');

// Use secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');

This is the Includes/configure.php

// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com
// HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com
define('HTTP_SERVER', 'http://testingmysite1bc.com');
define('HTTPS_SERVER', 'https://testingmysite1bc.com');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/store/');
define('DIR_WS_HTTPS_CATALOG', '/store/');

[hello]

I just notice this

You may have to load the whole catalog into an HTTPS directory also. Please consult your host for the URL you will need

?? do I have to do this? I can't even use the Contact Me form! The whole site is wacky!

[Ajeh]

The message could be for a number of reasons ...

It would be easier if we could perhaps peek at your site to see what the cause of this is ...

[hello]

i think I set the https wrong in zen cart.. is the php right?

[hello]

Do I have to move the site folders into a https folder.. something like a httpdocs folder? where do I find this folder? please help.

everything was fine before I try to install https: (ssl) on to the zen cart page

[DrByte]

I just notice this

You may have to load the whole catalog into an HTTPS directory also. Please consult your host for the URL you will need

?? do I have to do this?

Do I have to move the site folders into a https folder.. something like a httpdocs folder? where do I find this folder?

NO!
Unless your hosting company is using an old archaic configuration which requires all your SSL content to be served from an httpsdocs folder, then you DO NOT want to go duplicating your site needlessly. It's a RARE case where one would do that, and usually it's better to pick a better hosting service than to do the wasteful duplication.

[Ajeh]

Looks like either someone has written the configure.php files incorrectly or you have rewrites happening on your site ...

Since going to:
http://www.your_domain_name.com

automatically changes to a secure URL, this tells me you have rewrites happening ... at a minimum ...

Either you set these up or your hosting company did ... and things should not be setup in that manner ...

[hello]

Thanks for all your help.. So this should have been easy?

One get SSL for the main site

Two: after ssl for the main site.. just put in the https: in the two php files as mention in the zen cart ssl tutorials and that's it?? No need to upload folders or to secure all the folders..etc?

I'm using justhost for my host.

ps. did I do the php files right?

[hello]

don't know if this helps.

After I got the https for my main site. I went to the zen cart admin page to make a few changes.. it gave me a pop up about this is a secure site.. third party or something like that but when I try to save or make changes to the zen cart site It won't let me.. it just stay the same.

After I went to the two php files and changed it to https then I stop receiving the messages and was able to change the site.. is this normal?

[Ajeh]

Pretty positive that this is a server issue with how your domain is setup ...

More than likely your domain is set to force secure pages rather than let the code manage this for you ...

This means the two are fighting with one another and that isn't going to allow things to work properly ...