Results 1 to 10 of 10
  1. #1
    Join Date
    Feb 2009
    Posts
    5
    Plugin Contributions
    0

    css problem SSL Not Enabled in Shipping and Payment checkout

    Hi all. I am currently in the final stages of reworking my website from the old oscommerce to Zen Cart. Yes it is a completely fresh install, oscommerce just broke on me.

    Anyway, I have a dedicated SSL certificate for the website that works when I log in to the admin section, but will not move over to the https:// side when checking out an order. I have the offline credit card payment option enabled and must have it working before I can go back into production. I have already altered both the includes/configure.php and the admin/includes/configure.php to both state to 'true'. Is there anything else I need to do to make the SSL work in checkout?

    The website I am working on is http://kernroadfarm.com

    Thanks

  2. #2
    Join Date
    Apr 2006
    Location
    London, UK
    Posts
    10,569
    Plugin Contributions
    25

    Default Re: SSL Not Enabled in Shipping and Payment checkout

    It's not activated for your login either. Have you set it to true in both your includes/configure.php and admin/includes/configure.php files.
    Make sure you make the files writable before trying to upload your changes ... if they're read-only, you can't change them.
    Kuroi Web Design and Development | Twitter

    (Questions answered in the forum only - so that any forum member can benefit - not by personal message)

  3. #3
    Join Date
    Feb 2009
    Posts
    5
    Plugin Contributions
    0

    Default Re: SSL Not Enabled in Shipping and Payment checkout

    Yes, both configure.php files are labeled true. There is actually two instances of true in the admin configure page and one in the catalog page.

    That is true though, the admin login page is not in SSL, but when I log in it then goes to SSL mode. I would also like to have the login page SSL but it is not as big of a deal as the checkout process.

  4. #4
    Join Date
    Jan 2004
    Posts
    66,364
    Blog Entries
    7
    Plugin Contributions
    274

    Default Re: SSL Not Enabled in Shipping and Payment checkout

    When you've properly set the settings in your configure.php files, Zen Cart will automatically use SSL to protect your login pages (both admin and storefront) and your checkout and My Account pages.

    I suspect your changes aren't taking effect because of a read-only issue.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  5. #5
    Join Date
    Feb 2009
    Posts
    5
    Plugin Contributions
    0

    Default Re: SSL Not Enabled in Shipping and Payment checkout

    Sorry, yup you were right. Somehow my FTP program cached my changes to the includes/configure.php file so they looked they changed but weren't. So the checkout is working, but the admin login page is still unencrypted - is there any way to fix that?

  6. #6
    Join Date
    Jan 2004
    Posts
    66,364
    Blog Entries
    7
    Plugin Contributions
    274

    Default Re: SSL Not Enabled in Shipping and Payment checkout

    same way ... there's an admin/includes/configure.php file
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  7. #7
    Join Date
    Feb 2009
    Posts
    5
    Plugin Contributions
    0

    Default Re: SSL Not Enabled in Shipping and Payment checkout

    Okay, I triple checked and this is what I changed on the admin/includes/configure.php file:

    * If you desire your *entire* admin to be SSL-protected, make sure you use a "https:" URL for all 4 of the following:
    */
    define('HTTP_SERVER', 'https://kernroadfarm.com');
    define('HTTPS_SERVER', 'https://kernroadfarm.com');
    define('HTTP_CATALOG_SERVER', 'https://kernroadfarm.com');
    define('HTTPS_CATALOG_SERVER', 'https://kernroadfarm.com');

    // Use secure webserver for catalog module and/or admin areas?
    define('ENABLE_SSL_CATALOG', 'true');
    define('ENABLE_SSL_ADMIN', 'true');

    It logs onto the admin site in SSL, but I can just take the s out of https:// and I can still mess with the admin side. Is there anything else to change?

  8. #8
    Join Date
    Jan 2004
    Posts
    66,364
    Blog Entries
    7
    Plugin Contributions
    274

    Default Re: SSL Not Enabled in Shipping and Payment checkout

    It's working as presently designed.

    On almost any website you'll be able to take the "s" out of "https" and access the site. In some cases it will auto-switch you back to https immediately, or it will deny access if the host has set up certain .htaccess rewrite rules.
    With Zen Cart, if you get into the page as non-https, then as soon as you click on a link or submit a form, it will force it back into https so that everything you've submitted is protected. (This all assumes you've used https on all the URLs in your admin configure.php file.)
    If you want finer control than that, you'll have to get creative with .htaccess rewrite rules.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  9. #9
    Join Date
    Feb 2009
    Posts
    5
    Plugin Contributions
    0

    Default Re: SSL Not Enabled in Shipping and Payment checkout

    Okay, I thought I could get the actual admin login page to go into SSL mode but it really isn't a big deal. Thanks for all the help guys!!

  10. #10
    Join Date
    Jan 2004
    Posts
    66,364
    Blog Entries
    7
    Plugin Contributions
    274

    Default Re: SSL Not Enabled in Shipping and Payment checkout

    The actual admin login page does operate in SSL mode.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

 

 

Similar Threads

  1. v154 You do not have SSL enabled?
    By adb34 in forum General Questions
    Replies: 8
    Last Post: 31 Jul 2015, 03:26 AM
  2. v151 Checkout Shipping and Checkout Payment Page Layout
    By scisupply in forum Templates, Stylesheets, Page Layout
    Replies: 11
    Last Post: 15 Aug 2013, 06:41 PM
  3. Per item shipping - Enabled and not showing
    By arielon in forum Built-in Shipping and Payment Modules
    Replies: 13
    Last Post: 22 Oct 2008, 04:33 PM
  4. SSL Enabled but product pages not under https
    By divalyn in forum Installing on a Linux/Unix Server
    Replies: 7
    Last Post: 14 May 2008, 03:17 PM
  5. Download PnP module here. (with SSL and Curl enabled)
    By x-tremeentertainment in forum Built-in Shipping and Payment Modules
    Replies: 0
    Last Post: 9 Jul 2006, 09:55 PM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg
Zen-Cart, Internet Selling Services, Klamath Falls, OR