Enabling SSL Breaks Catalog / Admin

[DrByte]

However, the catalog itself is still using http:// until I go to checkout.

Yes, that is entirely normal.

This is causing the secure bar not to pop up until users are done shopping, and go to checkout.

Again, that's perfectly normal, and entirely expected.

Also, I put a .htaccess file at the root of the site to force traffic to https://

EEKS! Not a good idea!

Is there any way I can force the catalog to use https:// for all aspects while browsing the catalog and shopping?

WHY? Is there something super-secret about what your customers are shopping for?

[Famsta]

Ok ... if that's entirely normal then I guess then everything is fine. I wasn't totally sure it was working correctly yet.

I figured it would be nice for people to see the secure bar while shopping... (and partly because I just wanted to see it since I worked so hard to get it to work, )

I also got the feeling people consciously look for it after your previous reply, "It's very inexpensive and customers do like to know that you take their privacy and security seriously."

But I guess as long as it's there when people are putting in sensitive information it's all good.

Also, I should probably note, at one point I did have the catalog embedded within the main page using an iframe, this also caused the blue bar not to show up, even while checking out.

I'm assuming using an iframe is not an intended use. That's not really a problem I guess. I'll just point straight to the catalog instead.

[DrByte]

at one point I did have the catalog embedded within the main page using an iframe, this also caused the blue bar not to show up, even while checking out.

Correct. If the iframe is showing inside another non-ssl frame, then the "blue bar" will not show.

I'm assuming using an iframe is not an intended use.

Correct. Using iframes is generally bad practice in commerce applications.

[Famsta]

Thank you DrByte, you've been a huge help, you have no idea. I can feel my sanity being restored :)

I dedicate this song to you:
http://www.youtube.com/watch?v=6m3vtWYCuMg

[DrByte]

Haha!

Glad I was able to help.

[Guitar Colonel]

Hi all

I'm having the same problem

Hope you can help me

I've installed zencart....I also have purchase an SSL cert from my host

Everything is fine until i change the configure.php files to install the SSL...and then my site dissapears, plus I cannot access my admin

Can you help me?

I'm not sure what has happened...

Cheers
Anthony

[DrByte]

Classic symptoms of damaging the contents of your configure.php files:
http://www.zen-cart.com/content.php?124-blank-page
Additional articles possibly related:
http://www.zen-cart.com/content.php?...s-already-sent
http://www.zen-cart.com/content.php?...nd-of-the-file
http://www.zen-cart.com/content.php?...alled-zen-cart

[selcyis]

Question:

How would I force the https:// when going to the site instead of having it go to http:// ?

[DrByte]

Question:

How would I force the https:// when going to the site instead of having it go to http:// ?

Simple: change your HTTP_SERVER define from starting with 'http://' to start with 'https://' ... well, put the correct URL into it.

If you're using a shared-cert, don't do that, because your customers will see that you're sending them to some other random site and will just quit and go someplace else.

But, unless you've got a solid business reason for making "every" page be https, then don't. Zen Cart already takes care of SSL where it's required. Changing that is overkill and pointless for 95% of all stores. Don't do it unless you know EXACTLY why you're doing it.