Login And Logout Issue With Ssl

[virtue]

Hello All,

I have been having these problems with logging in and logging out after I have enabled SSL. It's driving me nuts for days now! I tried several ways here and there and still it's giving me the same problem.

This is what I am getting when I tried to log in with SSL.

https://ssl127.securednshost.com/~exophora/e-store/index.php?main_page=login&action=process&zenid=050e84c3dcc0114eac9117dde02ddca7

The page cannot be found
The page you are looking for might have been removed, had its name changed, or is temporarily unavailable.


And I have the same problem when logging out.I noticed that I get to the right page after clicking the back button or the refresh button.

Will some good fella please help me? Any Zen Master please come to my rescue? Here's the link to the store I'm working on:

https://ssl127.securednshost.com/~exophora/e-store/

http://www.exophora.com/e-store/


My great thanks in advance!

[Kim]

Please post your includes/configure.php - You are missing a slash in one of the address portions. Do not include your password.

[virtue]

Hello Kim,

here's a copy of my configure.php. I have been having this problem since I enabled SSL. Which slash am I missing?

<?php
/**
*
* @package Configuration Settings
* @copyright Copyright 2003-2006 Zen Cart Development Team
* @copyright Portions Copyright 2003 osCommerce
* @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
*/

// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
define('HTTP_SERVER', 'http://www.exophora.com');
define('HTTPS_SERVER', 'https://ssl127.securednshost.com/~exophora');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', true);

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/e-store/');
define('DIR_WS_HTTPS_CATALOG', '/e-store/');

define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/');

define('DIR_WS_PHPBB', '/');

// * DIR_FS_* = Filesystem directories (local/physical)
//the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
define('DIR_FS_CATALOG', '/home/exophora/public_html/e-store/');

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');
define('DIR_WS_UPLOADS', DIR_WS_IMAGES . 'uploads/');
define('DIR_FS_UPLOADS', DIR_FS_CATALOG . DIR_WS_UPLOADS);
define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/');

// define our database connection
define('DB_TYPE', 'mysql');
define('DB_PREFIX', 'zen_');
define('DB_SERVER', 'localhost'); // eg, localhost - should not be empty
define('DB_SERVER_USERNAME', 'XXXXXXX');
define('DB_SERVER_PASSWORD', 'XXXXXXX');
define('DB_DATABASE', 'xxxxxxx');
define('USE_PCONNECT', 'false'); // use persistent connections?
define('STORE_SESSIONS', 'mysql'); // leave empty '' for default handler or set to 'db'

// The next 2 "defines" are for SQL cache support.
// For SQL_CACHE_METHOD, you can select from: none, database, or file
// If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache
// or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder
// ie: /path/to/your/webspace/public_html/zen/cache -- leave no trailing slash
define('SQL_CACHE_METHOD', 'database');
define('DIR_FS_SQL_CACHE', '/home/exophora/public_html/e-store/cache');
?>

[Merlinpa1969]

I dont know why its doing it but your URL is being totally butchered

Look at the url closley
https://ssl127.securednshost.com/~exophora_page=index

above is the 404 url... and well this url dosnt exsist.

it should look like this

https://ssl127.securednshost.com/~ex...ain_page=index

[virtue]

This is the url I am getting when I tried to log in

https://ssl127.securednshost.com/~ex...ain_page=login

and for some reason it would let me in w/out a problem (after 100attempts) and gives me this same url after log in.

I don't know why you would say butchered when I just ENABLED THE SSL?

EDITED: Never, ever post the zen_id (session id) in a forum, email, newsgroup, newsletter, advertisement, etc. etc. etc. or you will be doomed ...

[virtue]

Is there any other else who can be of help?

Thanks.

[Ajeh]

What are your Session Settings in the Admin?

Currently, your URL gets trashed when it is on the secure pages as Merlin has already said ...

Either something is wrong with your hosting site's server settings or there is something very odd on your Session Settings ...

[virtue]

Okay, here's what I have for the Admin.

I do not experience any problem with the Admin, but if the Admin is related to the login and logout issue, then I guess it needs to be fixed?

<?php
//
/**
*
* @package Configuration Settings
* @copyright Copyright 2003-2006 Zen Cart Development Team
* @copyright Portions Copyright 2003 osCommerce
* @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
*/


// Define the webserver and path parameters
// Main webserver: eg, http://localhost - should not be empty for productive servers
// HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
// HTTP_CATALOG_SERVER is your Main webserver: eg, http://www.yourdomain.com
// HTTPS_CATALOG_SERVER is your Secure webserver: eg, https://www.yourdomain.com
/*
* URLs for your site will be built via:
* HTTP_SERVER plus DIR_WS_ADMIN or
* HTTPS_SERVER plus DIR_WS_HTTPS_ADMIN or
* HTTP_SERVER plus DIR_WS_CATALOG or
* HTTPS_SERVER plus DIR_WS_HTTPS_CATALOG
* ...depending on your system configuration settings
*/
define('HTTP_SERVER', 'http://exophora.com');
define('HTTPS_SERVER', 'https://ssl127.securednshost.com/~exophora');
define('HTTP_CATALOG_SERVER', 'http://exophora.com');
define('HTTPS_CATALOG_SERVER', 'https://ssl127.securednshost.com/~exophora');

// Use secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_ADMIN', '/e-store/admin/');
define('DIR_WS_CATALOG', '/e-store/');
define('DIR_WS_HTTPS_ADMIN', '/e-store/admin/');
define('DIR_WS_HTTPS_CATALOG', '/e-store/');

define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
define('DIR_WS_CATALOG_IMAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'images/');
define('DIR_WS_CATALOG_TEMPLATE', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/templates/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
define('DIR_WS_CATALOG_LANGUAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/languages/');

// * DIR_FS_* = Filesystem directories (local/physical)
//the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
define('DIR_FS_ADMIN', '/home/exophora/public_html/e-store/admin/');
define('DIR_FS_CATALOG', '/home/exophora/public_html/e-store/');

define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');
define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');
define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');
define('DIR_FS_CATALOG_TEMPLATES', DIR_FS_CATALOG . 'includes/templates/');
define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');
define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/');
define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

// define our database connection
define('DB_TYPE', 'mysql');
define('DB_PREFIX', 'zen_');
define('DB_SERVER', 'localhost'); // eg, localhost - should not be empty
define('DB_SERVER_USERNAME', 'xxxxxxxxx');
define('DB_SERVER_PASSWORD', 'xxxxxxxxx');
define('DB_DATABASE', 'xxxxxxxxxxxx');
define('USE_PCONNECT', 'false'); // use persistent connections?
define('STORE_SESSIONS', 'db'); // leave empty '' for default handler or set to 'db'

// The next 2 "defines" are for SQL cache support.
// For SQL_CACHE_METHOD, you can select from: none, database, or file
// If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache
// or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder
// ie: /path/to/your/webspace/public_html/zen/cache -- leave no trailing slash
define('SQL_CACHE_METHOD', 'database');
define('DIR_FS_SQL_CACHE', '/home/exophora/public_html/e-store/cache');

?>

[Kim]

I can't see anything obvious in your configs- so - it comes down to something odd with yout host- maybe a symlink for the HTTPS that is broken or something. Contact your host.

[virtue]

Hope you don't mind telling me what a symlink is.

I spoke with them and I was told that I need to set a cookie somewhere to make the browser remember the login and logout. I am not a php programmer. I am new to php. Now this is just sinking me to oblivion. Any idea? All I know of is that after I enabled the shared SSL, it gave rise to this problem. W/out the SSL, login and logout is fine. But I need the security badly for the protection of the store's customers private info.

Do you have an idea about setting a cookie? I don't know how to write a cookie either.


Thanks.