Searched SSL, no answers, so asking directly

[Dijenga]

WHY, sorry for shouting but it's a royal PAIN trying to figure out why Zencart does not like to behave after installing SSL on my server.

I've followed the thread "site making https" and everything there has already been done.

Finally, getting ready to go live, and my shopping cart will not behave. When I click on an item and select "Add to cart", I get this "Security Warning":

The information you have entered on this page will be sent over an insecure connection and could be read by a third party.

Are you sure you want to send this information?

WHY?????????

Can someone tell me what, outside of the thread cited above, I need to do to make this thing work with ssl?

This has become an extremely aggravating process of one thing after another that just won't work.

I've built this site before, but in html. Individual buttons for each item and all items are one only items. Had 5 times more inventory to account for.

It took less than 1/10th the time I've spent here with JUST the SSL crap.

Is there a shortcut? Is there a long way? IS THERE A . S-I-M-P-L-E , DOCUMENTED WAY TO DO THIS????

You know, what files to edit? What to change? At the least, a list of the files that need to be changed?

[lruskauff]

I'm no expert but I can give you a few things to check. When adding to the shopping cart does it display https and not http? When you go to your admin area, is it secure?

Did you check in different browsers to see if browser dependent?
Can you share your site so I can see?

Lr

[kobra]

Yeah post a link to your storefront

[PatClay]

It would also be worthwhile letting us know if you have any templates installed or other mods?

Also, in your browser, there will likely be tools to track down the insecure items, probably something hard coded. If you view the source of your page you shouldn't see any links to http://yourstore.com, only https://yourstore.com

Oh, and confirm (again, I am sure), that BOTH of your configure.php files have been updated

[store-support]

Its quite easy to fix, send some url so we can check it.

[Dijenga]

Yes, quite easy ... if I had time to open every single file and examine every single instance of every statement ever written.

Problem is I don't have that much time. It would help for there to be a list of files affected when you install on a secure site.

Not being facetious, but I'll try to make it as plain as possible:

When one clicks on "add to cart" .... EVERYTHING UP TO THAT POINT WORKS CORRECTLY ... that is where the problem is.

The reference is in the container "multipart / form data" and refers to "http://".

I know this needs to be changed. The problem is, I don't know what file to change.

HOW do I find what file that is getting data from so I can change to "https://"?

I'm not wanting to have someone do it ... I just don't understand php coding, and at 58 I really don't want to start over. Just point me to the correct file or documentation that tells me how to find the correct file.

Thought using a shopping cart like this would save me time, but it has taken over my life ... wife and daughter are extremely impatient and guess who looks like the devil here!

[mc12345678]

So Zen Cart has a built in text search available from the admin. Tools->developer tool kit.

From there it will search the files of your ZC install (there is a bit of a limit of what it will search like it doesn't search through your mpeg video for example), for the text that is entered.

By providing the site address, volunteers of this site can self review the displayed code, potentially identify either the specific text to search on, the specific file involved or based on experience the direct solution. In absence of that, guessing and trial by error can be suggested. ZC out-of-the-box operates with a SSL just fine. It is when other things that are not validated to operate with that current version of ZC are added that issues crop up. But that's where it is at at the moment.

Typical test at this point (and the link provided above is not really a flushed out resolution not a standard process (FAQ) to resolve such an issue) would be to temporarily switch to the default template (associated files ought to be unmodified), try the same. Results will help narrow down the cause of the issue.

Also would/could ask that the includes/configure.php file be posted (first press the # button in the message toolbar before pasting), obscuring your DB credentials.

[PatClay]

The thing here is that you shouldn't need to change any php files - I just did this and found the grand sum of one issue, with a plugin.

This leaves a couple of options:
1/ You have not done your configuration correctly. Hence the instructions to check both of your configure.php files.
2/ You have a plugin installed which is buggering something up. Hence the request for what plugins you have installed.
3/ You have manually changed a file & buggered something up. Hence the instructions to look at the page html.

Once you have identified where the error occurs, then there are a myriad of ways to search for given text in a directory, which will tell you which file is causing the error.

The problem is not going to be fixed by ignoring troubleshooting suggestions. You do realise how much everyone gets paid to answer your questions, don't you? About the same amount as you paid for the software you installed.

I suspect that the issue is you have not correctly updated both configure.php files, but that is just a guess, because the information you have given is not a lot of use.

Oh, and initially installing on a test server, not a live site is always a good idea.

[DrByte]

The reference is in the container "multipart / form data" and refers to "http://".

I know this needs to be changed. The problem is, I don't know what file to change.

Zen Cart builds its storefront URLs based on the HTTP_SERVER and HTTPS_SERVER settings in your /includes/configure.php file. When ENABLE_SSL is set to 'true' it will use the HTTPS_SERVER URL on pages that require SSL. On other pages it will use the HTTP_SERVER URL.

In 99.9999% of cases it works just fine exactly like that.
But in that 0.0001% of other cases there's a problem with the server config, or the browser is doing something overzealous. In those cases put an https URL in the HTTP_SERVER setting and your entire store will be treated as SSL and then there's no issue like you're encountering. It's rare for this to be truly necessary. But in the absence of a lot more technical info (including your actual URL), you may have to use this approach in the interim.

[Dijenga]

Zen Cart builds its storefront URLs based on the HTTP_SERVER and HTTPS_SERVER settings in your /includes/configure.php file. When ENABLE_SSL is set to 'true' it will use the HTTPS_SERVER URL on pages that require SSL. On other pages it will use the HTTP_SERVER URL.

In 99.9999% of cases it works just fine exactly like that.
But in that 0.0001% of other cases there's a problem with the server config, or the browser is doing something overzealous. In those cases put an https URL in the HTTP_SERVER setting and your entire store will be treated as SSL and then there's no issue like you're encountering. It's rare for this to be truly necessary. But in the absence of a lot more technical info (including your actual URL), you may have to use this approach in the interim.

Tried, doesn't work. All config.php files have all http references set to https. Cannot make purchase.