I have a 1.3.9H cart, and it's a showcase only.
Is there a way to disable SSL on all pages, admin included?
I have a 1.3.9H cart, and it's a showcase only.
Is there a way to disable SSL on all pages, admin included?
If you are allowing people to REGISTER, and you have SSL, it is a good idea to leave SSL in place, largely because it demonstrates to your users that you take their data protection seriously. So you show a degree of professionalism and get their respect.
As it is SHOWCASE only, the only instances of SSL being invoked will be when account holders register and subsequently login. Zencart does not use SSL when it is not needed. The site will operate under HTTP on all other occasions.
Similarly, with ADMIN... SSL is invoked only when needed.
My suggestion is that if you have SSL, then leave it as it is. There is no "down-side" in terms of site speed, and as I have mentioned, it offers significant protection for sensitive data transfers.
20 years a Zencart User
The new FireFox version, 9.0.1, does not allow, as a default, a user to access a web page with an SSL Certificate that does not match properly.
In previous versions of FireFox, I'd get a warning box about the SSL Certificate, but as I thought it was only in the Admin, I wasn't really concerned. I didn't think SSL was ever used with a showcase, as far as the catalog side.
Now, with the new FireFox, the Admin is inaccessible, unless using IE.
A pop-up box states, 'The URL is Not Valid and Cannot be Loaded' when I use 9.0.1. (in FF v 9.0.1)
And, setting up the showcase, I realized that the following functions yield the same pop-up box for the user:
-Tell A Friend
-Notify Me of Updates
and
-Leave a Review
Are these even available with a showcase?
Must a user register/login to access these functions?
Or, is this because of the mismatched SSL Certificate?
(correct IP, correct server, incorrect URL)
Last edited by Donn; 12 Jan 2012 at 04:29 PM.
Testing this with IE, I could get to a Registration screen, but only after a warning regarding the SSL Certificate.
So, I'm guessing that with a Showcase, these functions work, and it was just the SSL/Firefox thing.
Users can have accounts with a Showcase? That's what it looked like. This is my first showcase, so I was unaware that this is so.
Can any of those three above mentioned functions be set to work with non-registered users, as well as registered showcase visitors?
If you've decided that you don't need SSL for any purpose, set the ENABLE_SSL accordingly in your /includes/configure.php file. If this is set to 'false' then Zen Cart will only use the HTTP_SERVER value for generating URLs when serving any of its pages.
.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole
Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.