Updating website under SSL certificate issue

[dix30simulation]

Hello,

I have been securing my website with a SSL certificate and understood had to add a file in the root folder (.htaccess) to have my SSL applied.
Did update both configure.php files from False to True access the Admin panel BUT cannot edit anything (product, customers info, etc...) anymore.
I can browse easily from panel to panel but the EDIT option is not updating at all. the only error message, red bar on top of browser confirm "nothing has been changed"

When I get rid of the .htaccess file, all returns to normal.
Called my ISP (1and1.com) for support but they have no clue why it's doing that.

Or is there another file in the admin/include & /include folder I have to update as well?

Thanks in advance for your support.

Dan

[kobra]

When I get rid of the .htaccess file, all returns to normal
is there another file in the admin/include & /include folder I have to update as well?

Without the statement in .htaccess does the page load under https://??

That is all you should have to do as there is no other file

[RodG]

Hello,

I have been securing my website with a SSL certificate and understood had to add a file in the root folder (.htaccess) to have my SSL applied.

Errr, Why? What does the new .htaccess file contain?

This is *not* a normal requirement.

When I get rid of the .htaccess file, all returns to normal.

Isn't "normal" what is needed? What issues are you having when it is 'normal' (Sorry, but I am a little confused with this one).

Called my ISP (1and1.com) for support but they have no clue why it's doing that.

Perhaps it has something to do with your .htaccess file that you were told was needed? I assume it was the same host that told you you needed this file?

Or is there another file in the admin/include & /include folder I have to update as well?

No other files need changing. Please let us know a little more about the contents and the requirement for the .htaccess file, and perhaps expand a little on the problems you have without this file in place, as that will give us a better idea as to what is going on. At the moment it appears that you are trying to fix something that shouldn't be broken in the first place, and if you continue this path you'll probably end up digging yourself into a deeper and deeper hole.

Cheers
Rod

[dix30simulation]

Without the statement in .htaccess does the page load under https://??

That is all you should have to do as there is no other file

Thanks for your reply. Yes without the .htaccess file, the site load with the HTTPS://

[dix30simulation]

Errr, Why? What does the new .htaccess file contain?

This is *not* a normal requirement.

Isn't "normal" what is needed? What issues are you having when it is 'normal' (Sorry, but I am a little confused with this one).



Perhaps it has something to do with your .htaccess file that you were told was needed? I assume it was the same host that told you you needed this file?



No other files need changing. Please let us know a little more about the contents and the requirement for the .htaccess file, and perhaps expand a little on the problems you have without this file in place, as that will give us a better idea as to what is going on. At the moment it appears that you are trying to fix something that shouldn't be broken in the first place, and if you continue this path you'll probably end up digging yourself into a deeper and deeper hole.

Cheers
Rod

Thanks for your reply Rod,

So basically, I purchased a SSL certificate with Geotrust, my ISP (1and1) told me I had to add a file in my root folder called .htaccess that contains the following

RewriteEngine On
RewriteCond %{HTTP_HOST} ^(.*\.)*dix30simulation.com$ [NC]
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^(.*)$ https://www.dix30simulation.com/$1 [R]

Indeed, my website turned secure. Although I still add to update the configuration.php file from false to true to access my admin panel.

When I get rid/rename that file, the site goes back to http:/ and the admin area is editable (products, customer, orders, etc..) and adding that file again, and the site is back to https://
When in https://, no more edit permitted. It somehow look like because the site is secured, I cannot do anything.

Under I.E, icon are not displayed anymore and the page editor (ckeditor 3.7) does not display the window anymore.
Under Firefox, same thing
Under Google, even worse....

to me, it looks like I may need to update a file so to give access to EDIT in https:/ mode but what file may control this?

Thank you,
Dan

[dix30simulation]

Erratum to Kobra

Thanks for your reply. Yes without the .htaccess file, the site load with the HTTP:// (not secured)

[RodG]

So basically, I purchased a SSL certificate with Geotrust, my ISP (1and1) told me I had to add a file in my root folder called .htaccess that contains the following

RewriteEngine On
RewriteCond %{HTTP_HOST} ^(.*\.)*dix30simulation.com$ [NC]
RewriteCond %{SERVER_PORT} !^443$
RewriteRule ^(.*)$ https://www.dix30simulation.com/$1 [R]

OK, you can ignore what your host has told you. This is forcing your entire site to use a secure connection, even when it conflicts with what ZenCart is expecting.

Indeed, my website turned secure. Although I still add to update the configuration.php file from false to true to access my admin panel.

This confirms what I've just stated.

When I get rid/rename that file, the site goes back to http:/ and the admin area is editable (products, customer, orders, etc..) and adding that file again, and the site is back to https://

You'll find that when you get rid of that file you'll be able to type in "https://youdom.ain/" and it should render as a secure page. If you then click any of the dynamically created links on the page (almost all of them) they should point to either a http or https page in accordance to your settings in the two zencart configure.php files.

That's it. Nothing more complicated than that.

to me, it looks like I may need to update a file so to give access to EDIT in https:/ mode but what file may control this?

There is no such file/option.

Get rid of the .htaccess file. Set your SSL config requirements using the zencart configure files, and all will be sweet. About the only 'gotcha' is being aware that
if your SSL cert has been issued for "www.yourdomain.com" then that is what you need to enter as the secure host in your config files. If your cert is for 'yourdomain.com' (no WWW) then don't put the 'www' in the config files either.

Cheers
Rod

Tip: It is the 'https' that causes a secure connection to be attempted.

[dix30simulation]

Indeed, this works!
Why complication when simplicity is just around the corner!

Thank you Rod, very much appreciated....

Dan