Results 1 to 5 of 5
  1. #1
    Join Date
    Oct 2007
    Posts
    241
    Plugin Contributions
    0

    Default Forcing non-SSL for cart

    I have a 1.3.9H cart, and it's a showcase only.

    Is there a way to disable SSL on all pages, admin included?

  2. #2
    Join Date
    Jun 2005
    Location
    Cumbria, UK
    Posts
    10,267
    Plugin Contributions
    3

    Default Re: Forcing non-SSL for cart

    If you are allowing people to REGISTER, and you have SSL, it is a good idea to leave SSL in place, largely because it demonstrates to your users that you take their data protection seriously. So you show a degree of professionalism and get their respect.

    As it is SHOWCASE only, the only instances of SSL being invoked will be when account holders register and subsequently login. Zencart does not use SSL when it is not needed. The site will operate under HTTP on all other occasions.

    Similarly, with ADMIN... SSL is invoked only when needed.

    My suggestion is that if you have SSL, then leave it as it is. There is no "down-side" in terms of site speed, and as I have mentioned, it offers significant protection for sensitive data transfers.
    20 years a Zencart User

  3. #3
    Join Date
    Oct 2007
    Posts
    241
    Plugin Contributions
    0

    Default Re: Forcing non-SSL for cart

    The new FireFox version, 9.0.1, does not allow, as a default, a user to access a web page with an SSL Certificate that does not match properly.

    In previous versions of FireFox, I'd get a warning box about the SSL Certificate, but as I thought it was only in the Admin, I wasn't really concerned. I didn't think SSL was ever used with a showcase, as far as the catalog side.

    Now, with the new FireFox, the Admin is inaccessible, unless using IE.

    A pop-up box states, 'The URL is Not Valid and Cannot be Loaded' when I use 9.0.1. (in FF v 9.0.1)

    And, setting up the showcase, I realized that the following functions yield the same pop-up box for the user:

    -Tell A Friend

    -Notify Me of Updates

    and

    -Leave a Review

    Are these even available with a showcase?
    Must a user register/login to access these functions?

    Or, is this because of the mismatched SSL Certificate?
    (correct IP, correct server, incorrect URL)
    Last edited by Donn; 12 Jan 2012 at 04:29 PM.

  4. #4
    Join Date
    Oct 2007
    Posts
    241
    Plugin Contributions
    0

    Default Re: Forcing non-SSL for cart

    Testing this with IE, I could get to a Registration screen, but only after a warning regarding the SSL Certificate.

    So, I'm guessing that with a Showcase, these functions work, and it was just the SSL/Firefox thing.

    Users can have accounts with a Showcase? That's what it looked like. This is my first showcase, so I was unaware that this is so.

    Can any of those three above mentioned functions be set to work with non-registered users, as well as registered showcase visitors?

  5. #5
    Join Date
    Jan 2004
    Posts
    66,446
    Plugin Contributions
    81

    Default Re: Forcing non-SSL for cart

    If you've decided that you don't need SSL for any purpose, set the ENABLE_SSL accordingly in your /includes/configure.php file. If this is set to 'false' then Zen Cart will only use the HTTP_SERVER value for generating URLs when serving any of its pages.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

 

 

Similar Threads

  1. Replies: 2
    Last Post: 15 Jun 2012, 12:18 AM
  2. user gets kicked off between ssl and non ssl
    By keneso in forum General Questions
    Replies: 9
    Last Post: 10 Aug 2011, 12:36 AM
  3. forcing images to ssl
    By helpme in forum Templates, Stylesheets, Page Layout
    Replies: 5
    Last Post: 31 Mar 2010, 02:35 AM
  4. convert non-ssl store to ssl
    By artcoder in forum Templates, Stylesheets, Page Layout
    Replies: 1
    Last Post: 8 Jul 2008, 04:15 PM
  5. PnP non-ssl and ssl (plug npay payment modules) download for 1.3.x
    By x-tremeentertainment in forum Addon Payment Modules
    Replies: 0
    Last Post: 7 Dec 2006, 10:02 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg