No HTTPS folder, is this right?

[mesamexicanfoods]

Hello,

New to Zen Cart, and have been trying to find this info on the forums with no luck. I am working on securing my site, and I noticed that I don't have an HTTPS folder in my site when I look in file manager. I set up the configuration settings for using a shared SSL, and the site is going over to the shared SSL url during checkout.

Am I really secure? Since I couldn't find anyplace to upload my store to in a secure area, can I really be secure? Is it possible that I don't need to upload to a secure area? I haven't asked my host to do anything for me, so I know they haven't changed anything.

Any help would be appreciated!

Thank you,
Jacqueline

[Merlinpa1969]

not all server setups have a secure folder,

cpanel serves all from 1 server and it is just as secure as hagging 2 seperate folders and its a LOT less headache

[Hound]

If I am following this correctly that would mean that on Cpanel sites the editing in the config files would not need to include lines with "https" ? Is this correct? We could just leave them as "http" and add the path?

[Merlinpa1969]

no you will need to use the http and the https paths in the site name defines but you dont have to have 2 seperate sets of files

[Hound]

Since you are responding so quickly, if I post my config files, can you tell me how the heck I managed to lock myself out of the admin?

[Merlinpa1969]

sure
post the top 40 lines

[Hound]

admin/includes/configure.php:

/*************** NOTE: This file is similar, but DIFFERENT from the "store" version of configure.php. ***********/
/*************** The 2 files should be kept separate and not used to overwrite each other. ***********/

// Define the webserver and path parameters
// Main webserver: eg, http://localhost - should not be empty for productive servers
// HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
// HTTP_CATALOG_SERVER is your Main webserver: eg, http://www.yourdomain.com
// HTTPS_CATALOG_SERVER is your Secure webserver: eg, https://www.yourdomain.com
/*
* URLs for your site will be built via:
* HTTP_SERVER plus DIR_WS_ADMIN or
* HTTPS_SERVER plus DIR_WS_HTTPS_ADMIN or
* HTTP_SERVER plus DIR_WS_CATALOG or
* HTTPS_SERVER plus DIR_WS_HTTPS_CATALOG
* ...depending on your system configuration settings
*/



if( $_SERVER["SERVER_NAME"]=="localhost") {

define('HTTP_SERVER', 'http://www.wholesomehound.com');
define('HTTPS_SERVER', 'http://www.wholesomehound.com');
define('HTTP_CATALOG_SERVER', 'http://www.wholesomehound.com');
define('HTTPS_CATALOG_SERVER', 'http://www.wholesomehound.com');
// * DIR_FS_* = Filesystem directories (local/physical)
//the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
define('DIR_FS_ADMIN', 'c:/wamp/www/wholesomehounds/admin/');
define('DIR_FS_CATALOG', 'c:/wamp/www/wholesomehound/');


// define our database connection
define('DB_TYPE', 'mysql');
define('DB_PREFIX', 'zen_');
define('DB_SERVER', 'localhost');
define('DB_SERVER_USERNAME', 'root');
define('DB_SERVER_PASSWORD', '');
define('DB_DATABASE', 'wholesom_zc1');
define('USE_PCONNECT', 'false'); // use persistent connections?
define('STORE_SESSIONS', 'db'); // use 'db' for best support, or '' for file-based storage

// The next 2 "defines" are for SQL cache support.
// For SQL_CACHE_METHOD, you can select from: none, database, or file
// If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache
// or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder
// ie: /path/to/your/webspace/public_html/zen/cache -- leave no trailing slash
define('SQL_CACHE_METHOD', 'database');
define('DIR_FS_SQL_CACHE', '/home/wholesom/public_html/cache');


} else {

define('HTTP_SERVER', 'http://wholesomehound.com');
define('HTTPS_SERVER', 'http://wholesomehound.com');
define('HTTP_CATALOG_SERVER', 'http://wholesomehound.com');
define('HTTPS_CATALOG_SERVER', 'http://wholesomehound.com');

// * DIR_FS_* = Filesystem directories (local/physical)
//the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
define('DIR_FS_ADMIN', '/home/wholesom/public_html/admin/');
define('DIR_FS_CATALOG', '/home/wholesom/public_html/');

Includes/configure.php

[Hound]

/*************** NOTE: This file is similar, but DIFFERENT from the "admin" version of configure.php. ***********/
/*************** The 2 files should be kept separate and not used to overwrite each other. ***********/

// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
if( $_SERVER["SERVER_NAME"]=="localhost") {
define('HTTP_SERVER', 'http://www.wholesomehound.com');
define('HTTPS_SERVER', 'http://www.wholesomehound.com');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', '/');

I managed to get back into the admin but I still do not have a lock appearing on my pages.

I am using Cpanel to access these files and my cert is installed on my server.

[Merlinpa1969]

you need to change this
define('HTTPS_SERVER', 'http://www.wholesomehound.com');
to
define('HTTPS_SERVER', 'https://www.wholesomehound.com');

[Hound]

you need to change this
define('HTTPS_SERVER', 'http://www.wholesomehound.com');
to
define('HTTPS_SERVER', 'https://www.wholesomehound.com');

Even though I am not using an https folder? Cpanel does not require a separate https folder and I do not have one. Do I need to make one and copy everything over to it? I thought that I had read that it was not needed? Now I am confused.

I changed it and still no lock...