security lock icon missing

[vfrazier]

I'm using Zen Cart 1.3.9f
Patch: 1::
Database Patch Level: 1.3.9a

My webstore is at www.flyboyaccessories.com

I had a customer call last week and ask where the lock symbol was. I'm an airplane guy, not a tech guy, and hadn't even noticed it wasn't there. This was the first customer to ever ask in over 2 years.

I read a few posts from other users who had questions about the missing lock icon. I suppose I'm having similar issues but couldn't figure out where my site is going awry.

I use Paypal to process the payments.

When I login and go to checkout with Firefox, I don't get the lock symbol or any https in the URL regardless or whether I choose credit card pmt or Paypal.

Using IE is the same, except that when paying with Paypal a lock does appear as does a https during the Paypal portion of the checkout.

Any suggestions on what to check? Please use small words. I can build you a 250mph aerobatic airplane, but computer talk might as well be japanese!

[lat9]

Did you buy an SSL (Secure Socket Layer) certificate for your site? If so, did you modify your /includes/configure.php

define('HTTPS_SERVER', 'https://www.flyboyaccessories.com.com');

[vfrazier]

No, I didn't buy one. The salesman at the hosting service on the phone (over 2 years ago) assured me that I wouldn't need one. I guess he was wrong and I simply didn't know.

Regardless, I did buy one, and a dedicated IP and will update the config file right away.

If it gives me any more trouble, I'll be back tomorrow, but hopefully this will take care of it.

Thanks for the quick reply.

[gjh42]

Just be sure that the SSL is in the exact form that your regular site URL uses - If it is for flyboyaccessories.com instead of www.flyboyaccessories.com, you will get "insecure" issues.

You could have had a shared SSL certificate, which does provide security but will raise red flags from browsers as the name on the certificate won't match your site name.

[Ajeh]

Check your two files:
/includes/configure.php
/your_secret_admin_dir/includes/configure.php

1 do you have your secure URL defined? Your certificate appears to be for ...

https://www.flyboyaccessories.com

2 do you have the secure enabled?

[mprough]

No, I didn't buy one. The salesman at the hosting service on the phone (over 2 years ago) assured me that I wouldn't need one. I guess he was wrong and I simply didn't know.

If you don't accept credit cards on your site... Meaning they leave to pay at PayPal... Then you don't require an SSL.

~Melanie

[vfrazier]

I've made several "upgrades" in the last day or so. Apparently, getting the SSL cert and individual IP takes a bit of time.

All payments are processed through Paypal, but that doesn't help if the customers are looking for the lock icon before the checkout. Heck, I'm not even sure where exactly my site stops and Paypal begins. I mean, when the customer pays with a credit card, that's still on my site, isn't it? And if they choose to pay at PayPal by logging in with Paypal, then they're offsite?

The customer who prompted me to look closer at this seemed hesitant to even send a check to me unless my site had the lock icon. I wonder if he lets waitresses walk off with his card at O'Charlie's?

[gjh42]

"when the customer pays with a credit card, that's still on my site, isn't it?"

Do you accept credit cards directly, as well as Paypal? If you do, you absolutely needed the SSL all along.

[vfrazier]

All along?... ack! Oh well, it appears to be all fixed now with help from everyone above, and my Goh Koon Heok book.

The lock icon does appear to be functioning in Mozilla and IE, for both customer logins and admin logins! I've got a shiny new SSL, a dedicated IP, and a nifty Sitelock service supposedly watching over it all.

Now to go check all the other stuff I've ignored or been to ignorant to fix!...... me + computers=certain chaos.

Thanks.