Step 2 of Payment process not secure, have SSL, Holyinsecurity, Batman

[surrealcurly]

Hey all,
I'm running 1.3.8, upgraded from 1.3.7 about a year ago
I have addons: Add cust from admin, return auth, links mgr, account holder, installment, Apsona - all installed by Clyde J of the forum.
I've been using PayPal for credit cards on my site but just got my Authorize.net AIM account today, and already had a SSL Cert. When you go to pay for an item, and click 'Checkout', for Step 2, Payment Method, the page isn't secure. In Admin>Config I have it set as 'True' for both Admin and Catalog for HTTPS, and my Admin area is https, but I can't for the life of me figure out how to secure Step 2 and beyond. I don't think anyone would want to input their cc info without it. Any help would be appreciated.

[surrealcurly]

Hey all,
I must have bumped my head. I'm using 1.3.9 upgraded from 1.3.8.
Thanks again,
Karl

[nigelt74]

assuming the site is the Roswell one you don't appear to have ssl set up for the store

as when i went to register/login

the store didn't switch to ssl, (which it should iff ssl is configured correctly)

you need to check your /includes/configure.php file to ensure its set correctly

Download the one off your server (as thats the one your site is using) and check it, and paste it here (with sensitive info hashed out), and someone will be able to tell you where you are going wrong

[surrealcurly]

Hey Nigel,
Thanks for your reply. Here are the changes made for the SSL Cert:

define('HTTP_SERVER', 'http://www.mydomainhere.com');
define('HTTPS_SERVER', 'https://www.mydomainhere.com');
define('HTTP_CATALOG_SERVER', 'http://www.mydomainhere.com');
define('HTTPS_CATALOG_SERVER', 'https://www.mydomainhere.com');

// Use secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');

It seems pretty straight forward to me, but I also thought smoking was a good idea at one time, so what do I know.
Thanks again,
Karl

[nigelt74]

Hi Karl

That looks like your

admin/includes/configure.php

the one you need is the

/includes/configure.php

Make sure you download it off the server

[surrealcurly]

Nigel,
This would be what I'd call a 'duh' moment. I've ran PayPal for so long that SSL wasn't an issue. You were right, it was a simple fix, the old configure.php.
Thanks much!