Results 1 to 6 of 6
  1. #1
    Join Date
    Mar 2015
    Location
    United Kingdom
    Posts
    12
    Plugin Contributions
    0

    Default HTTPS on Customer create account page?

    Hi

    Been trying to set up google merchant center feeds and all has check fine but they say my customer registration page needs to be HTTPs as it is not secure running v1.5.4 of zencart not sure on this as I have not seen this issue before is there a way to enable HTTPs on this section at all.

    book - axis .co.uk

  2. #2
    Join Date
    Sep 2009
    Location
    Stuart, FL
    Posts
    9,395
    Plugin Contributions
    72

    Default Re: HTTPS on Customer create account page?

    I don't understand the issue (who's they?). When I go to your site and click on the "My Account" link, I'm taken to the login/create-account page that is using https protocol.

  3. #3
    Join Date
    Aug 2009
    Location
    North Idaho, USA
    Posts
    1,818
    Plugin Contributions
    1

    Default Re: HTTPS on Customer create account page?

    I received a 'mixed content' error (FireFox) which might be the reason for the complaint.

    Could it be the link in the footer following the copyright notice?
    Hardcoded link in the "Chat" button?
    or others?
    Rick
    ChainWeavers (dot) com

  4. #4
    Join Date
    Sep 2009
    Location
    Stuart, FL
    Posts
    9,395
    Plugin Contributions
    72

    Default Re: HTTPS on Customer create account page?

    Quote Originally Posted by RixStix View Post
    I received a 'mixed content' error (FireFox) which might be the reason for the complaint.

    Could it be the link in the footer following the copyright notice?
    Hardcoded link in the "Chat" button?
    or others?
    Oh, nice catch, RixStix!

  5. #5
    Join Date
    Mar 2015
    Location
    United Kingdom
    Posts
    12
    Plugin Contributions
    0

    Default Re: HTTPS on Customer create account page?

    Cheers

    I will have a look at that as originally it was account page was non HTTPs, I have had to make all pages on the store front now HTTPs to pass Google Merchant checks, (that is who they are).

    The Engineers at Google said account page has to be HTTPs

    I have looked around and account page to register as a new customer is not secure on zencart from two sites and a default set up I have checked over

  6. #6
    Join Date
    Jan 2004
    Posts
    65,335
    Blog Entries
    7
    Plugin Contributions
    229

    Default Re: HTTPS on Customer create account page?

    Maybe they're being excessively picky. Technically the form needs to submit TO a secure page; strictly speaking it doesn't matter whether the page itself draws unsecure before any customer data is entered. But, it's still good to display those pages secure, if only for peace of mind, and to be sure that any re-displayed data after an error is also handled securely.

    Zen Cart has always handled sensitive pages securely when you have ENABLE_SSL set to 'true' and HTTPS_SERVER defined to an https URL. And it appears your site is doing that normally.

    But that doesn't stop someone from manually changing the URL from https to http ... which is maybe what Google is doing in their tests? While it's technically correct to "test" that, in reality none of your site's files (er, well, original ZC files) would generate any such links.


    If Google is complaining that the padlock disappears even when the page is https, take a look at your Live Chat image ... which appears to be loading over http instead of https. Yes you should fix that; it's incredibly minor but it does break the fancy padlock and therefore confuses visitors and apparently also the might google.


    I'd be asking Google for more SPECIFICS about what EXACTLY the problem is. Not some robot report, but an actual human.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

 

 

Similar Threads

  1. Extra Fields for Customer Sign Up (Create Account) Page
    By jackie.taferner in forum All Other Contributions/Addons
    Replies: 175
    Last Post: 24 Feb 2019, 12:15 AM
  2. v138a create customer account
    By stantdesign in forum General Questions
    Replies: 1
    Last Post: 14 Jan 2014, 01:12 AM
  3. can't create customer account
    By ohmmicronics in forum Managing Customers and Orders
    Replies: 3
    Last Post: 7 Mar 2010, 06:18 AM
  4. Replies: 2
    Last Post: 15 Nov 2009, 07:14 PM
  5. Create Customer Account - UK
    By portchey in forum Templates, Stylesheets, Page Layout
    Replies: 3
    Last Post: 3 Jan 2008, 11:44 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg
Zen-Cart, Internet Selling Services, Klamath Falls, OR