Results 1 to 10 of 10
  1. #1
    Join Date
    Jun 2012
    Posts
    26
    Plugin Contributions
    0

    Default Cannot disable SSL (Yes I've read the tutorial)

    I feel like a crazy person. I've been using ZenCart for a few years now, and decided recently in June to stop renewing my SSL certificate because I only take Paypal for payment now.

    However, I cannot for the life of me get any of my browsers to stop accessing my website (www.mgsdesigns.net) as a secure site. I read the FAQ and made the changes it said to, and have searched the forum already for answers, none of which have helped. I'm using ZenCart version 1.5.4. My /store/includes/configure.php file reads:

    Code:
    <?php
    /**
     * @package Configuration Settings circa 1.5.4
     * @copyright Copyright 2003-2014 Zen Cart Development Team
     * @copyright Portions Copyright 2003 osCommerce
     * @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
     * File Built by zc_install on 2015-01-20 08:41:46
     */
    
    
    /*************** NOTE: This file is similar, but DIFFERENT from the "admin" version of configure.php. ***********/
    /***************       The 2 files should be kept separate and not used to overwrite each other.      ***********/
    
    // Define the webserver and path parameters
      // HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com
      // HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com
      define('HTTP_SERVER', 'http://www.mgsdesigns.net');
      define('HTTPS_SERVER', 'https://www.mgsdesigns.net');
    
      // Use secure webserver for checkout procedure?
      define('ENABLE_SSL', 'false');
    
    // NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
    // * DIR_WS_* = Webserver directories (virtual/URL)
      // these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
      define('DIR_WS_CATALOG', '/store/');
      define('DIR_WS_HTTPS_CATALOG', '/store/');
    
      define('DIR_WS_IMAGES', 'images/');
      define('DIR_WS_INCLUDES', 'includes/');
      define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
      define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
      define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
      define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
      define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
      define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/');
    
      define('DIR_WS_PHPBB', '/');
    
    // * DIR_FS_* = Filesystem directories (local/physical)
      //the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
      define('DIR_FS_CATALOG', '/home/grakow5/public_html/store/');
    
      //the following path is a COMPLETE path to the /logs/ folder  eg: /var/www/vhost/accountname/public_html/store/logs ... and no trailing slash
      define('DIR_FS_LOGS', '/home/grakow5/public_html/store/logs');
    
      define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
      define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');
      define('DIR_WS_UPLOADS', DIR_WS_IMAGES . 'uploads/');
      define('DIR_FS_UPLOADS', DIR_FS_CATALOG . DIR_WS_UPLOADS);
      define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/');
    
    // define our database connection
      define('DB_TYPE', 'mysql');
      define('DB_PREFIX', '');
      define('DB_CHARSET', 'utf8');
      define('DB_SERVER', 'localhost');
      define('DB_SERVER_USERNAME', 'grakow5_mel2015');
      define('DB_SERVER_PASSWORD', 'Poison12*');
      define('DB_DATABASE', 'grakow5_store2015');
    
      // The next 2 "defines" are for SQL cache support.
      // For SQL_CACHE_METHOD, you can select from:  none, database, or file
      // If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache 
      // or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder
      // ie: /path/to/your/webspace/public_html/zen/cache   -- leave no trailing slash  
      define('SQL_CACHE_METHOD', 'none'); 
      define('DIR_FS_SQL_CACHE', '/home/grakow5/public_html/store/cache');
    
    // EOF
    And my admin/includes/configure.php file reads:

    Code:
    <?php
    /**
     * @package Configuration Settings circa 1.5.4
     * @copyright Copyright 2003-2014 Zen Cart Development Team
     * @copyright Portions Copyright 2003 osCommerce
     * @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
     * File Built by zc_install on 2015-01-20 08:41:46
     */
    
    
    /*************** NOTE: This file is similar, but DIFFERENT from the "store" version of configure.php. ***********/
    /***************       The 2 files should be kept separate and not used to overwrite each other.      ***********/
    
    /**
     * WE RECOMMEND THAT YOU USE SSL PROTECTION FOR YOUR ENTIRE ADMIN:
     * To do that, make sure you use a "https:" URL for BOTH the HTTP_SERVER and HTTPS_SERVER entries:
     */
      define('HTTP_SERVER', 'http://www.mgsdesigns.net');
      define('HTTPS_SERVER', 'http://www.mgsdesigns.net');
      define('HTTP_CATALOG_SERVER', 'http://www.mgsdesigns.net/store');
      define('HTTPS_CATALOG_SERVER', 'http://www.mgsdesigns.net/store');
    
      // secure webserver for admin?  Valid choices are 'true' or 'false' (including quotes).
      define('ENABLE_SSL_ADMIN', 'false');
    
      // secure webserver for storefront?  Valid choices are 'true' or 'false' (including quotes).
      define('ENABLE_SSL_CATALOG', 'false');
    
      define('DIR_WS_ADMIN', preg_replace('#^' . str_replace('-', '\-', zen_parse_url(HTTP_SERVER, '/path')) . '#', '', dirname($_SERVER['SCRIPT_NAME'])) . '/');
      define('DIR_WS_CATALOG', '/store/');
      define('DIR_WS_HTTPS_ADMIN', preg_replace('#^' . str_replace('-', '\-', zen_parse_url(HTTPS_SERVER, '/path')) . '#', '', dirname($_SERVER['SCRIPT_NAME'])) . '/');
      define('DIR_WS_HTTPS_CATALOG', '/store//');
    
    // NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
    // * DIR_WS_* = Webserver directories (virtual/URL)
      // these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
      define('DIR_WS_IMAGES', 'images/');
      define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
      define('DIR_WS_CATALOG_IMAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'images/');
      define('DIR_WS_CATALOG_TEMPLATE', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/templates/');
      define('DIR_WS_INCLUDES', 'includes/');
      define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
      define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
      define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
      define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
      define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
      define('DIR_WS_CATALOG_LANGUAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/languages/');
    
    // * DIR_FS_* = Filesystem directories (local/physical)
      define('DIR_FS_ADMIN', preg_replace('#.includes$#', '', realpath(dirname(__FILE__) . '/../') . '/'));
      //the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
      define('DIR_FS_CATALOG', '/home/grakow5/public_html/store/');
    
      //the following path is a COMPLETE path to the /logs/ folder  eg: /var/www/vhost/accountname/public_html/store/logs ... and no trailing slash
      define('DIR_FS_LOGS', '/home/grakow5/public_html/store/logs');
    
      define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');
      define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');
      define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');
      define('DIR_FS_CATALOG_TEMPLATES', DIR_FS_CATALOG . 'includes/templates/');
      define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');
      define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/');
      define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
    
    // define our database connection
      define('DB_TYPE', 'mysql');
      define('DB_PREFIX', '');
      define('DB_CHARSET', 'utf8');
      define('DB_SERVER', 'localhost');
      define('DB_SERVER_USERNAME', 'grakow5_mel2015');
      define('DB_SERVER_PASSWORD', 'Poison12*');
      define('DB_DATABASE', 'grakow5_store2015');
    
      // The next 2 "defines" are for SQL cache support.
      // For SQL_CACHE_METHOD, you can select from:  none, database, or file
      // If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache 
      // or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder
      // ie: /path/to/your/webspace/public_html/zen/cache   -- leave no trailing slash  
      define('SQL_CACHE_METHOD', 'none'); 
      define('DIR_FS_SQL_CACHE', '/home/grakow5/public_html/store/cache');
    
    
    // Define the webserver and path parameters
      // Main webserver: eg-http://www.your_domain.com - 
      // HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com
      // HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com
      // HTTP_CATALOG_SERVER is your Main webserver: eg-http://www.your_domain.com
      // HTTPS_CATALOG_SERVER is your Secure webserver: eg-https://www.your_domain.com
      /* 
       * URLs for your site will be built via:  
       *     HTTP_SERVER plus DIR_WS_ADMIN or
       *     HTTPS_SERVER plus DIR_WS_HTTPS_ADMIN or 
       *     HTTP_SERVER plus DIR_WS_CATALOG or 
       *     HTTPS_SERVER plus DIR_WS_HTTPS_CATALOG
       * ...depending on your system configuration settings
       */
    // EOF
    Can someone please help me? I have no idea what I'm doing wrong. My web host (InMotion) turned off my SSL in June and I've been having this problem ever since, they said it was my ZenCart settings and not on their end.

    Thank you in advance for any help!

  2. #2
    Join Date
    Jun 2012
    Posts
    26
    Plugin Contributions
    0

    Default Re: Cannot disable SSL (Yes I've read the tutorial)

    I forgot to add I did try clearing my browser cache for my website on Safari and Firefox and both are still attempting to access my site as https instead of http.

  3. #3
    Join Date
    Jul 2012
    Posts
    16,718
    Plugin Contributions
    17

    Default Re: Cannot disable SSL (Yes I've read the tutorial)

    What is in your .htaccess file in the root of your store?
    ZC Installation/Maintenance Support <- Site
    Contribution for contributions welcome...

  4. #4
    Join Date
    Jan 2004
    Posts
    66,364
    Blog Entries
    7
    Plugin Contributions
    274

    Default Re: Cannot disable SSL (Yes I've read the tutorial)

    When you visit the store folder directly it honors the configure.php SSL settings.
    So that means your ZC is configured properly.

    But if you visit your domain (without the /store) then it's getting rewritten as https. That's in your .htaccess or in your domain's master configuration. If you don't have access to the folder *above* your /store/ folder, then talk to your hosting company to get them to fix the "forced SSL" that's going on in your hosting account.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  5. #5
    Join Date
    Jun 2012
    Posts
    26
    Plugin Contributions
    0

    Default Re: Cannot disable SSL (Yes I've read the tutorial)

    Thank you both!! My .htaccess reads as the following:

    Code:
    RewriteEngine on
    
    RewriteOptions inherit
    
    # To set your custom php.ini, add the following line to this file:
    # suphp_configpath /home/yourusername/path/to/php.ini
    
    RewriteCond %{HTTP_HOST} ^mgsdesigns\.net$ [OR]
    RewriteCond %{HTTP_HOST} ^www\.mgsdesigns\.net$
    RewriteRule ^/?$ "https\:\/\/www\.mgsdesigns\.net\/store" [R=301,L]
    
    RewriteCond %{HTTP_HOST} ^melissashippee\.com$ [OR]
    RewriteCond %{HTTP_HOST} ^www\.melissashippee\.com$
    RewriteRule ^/?$ "https\:\/\/www\.mgsdesigns\.net\/store" [R=301,L]
    What can I change to make my site not automatically try to load as https when you simply type "www.mgsdesigns.net" into the browser? I never link directly to the /store folder, just to the URL. Thank you!!

    Quote Originally Posted by DrByte View Post
    When you visit the store folder directly it honors the configure.php SSL settings.
    So that means your ZC is configured properly.

    But if you visit your domain (without the /store) then it's getting rewritten as https. That's in your .htaccess or in your domain's master configuration. If you don't have access to the folder *above* your /store/ folder, then talk to your hosting company to get them to fix the "forced SSL" that's going on in your hosting account.

  6. #6
    Join Date
    Oct 2010
    Location
    United Kingdom
    Posts
    477
    Plugin Contributions
    0

    Default Re: Cannot disable SSL (Yes I've read the tutorial)

    At the risk of not helping have you tried removing these 2 lines
    RewriteRule ^/?$ "https\:\/\/www\.mgsdesigns\.net\/store" [R=301,L]
    RewriteRule ^/?$ "https\:\/\/www\.mgsdesigns\.net\/store" [R=301,L]
    I only ask as I don't have those in my .hta just the other 2 lines.
    Although why would you want to remove SSL I had 1 for PayPal only as well ,it is almost a must these days
    Last edited by Andy-C27; 31 Jul 2016 at 09:24 AM.

  7. #7
    Join Date
    Jan 2004
    Posts
    66,364
    Blog Entries
    7
    Plugin Contributions
    274

    Default Re: Cannot disable SSL (Yes I've read the tutorial)

    Just take out the "s" in the https in those rules.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  8. #8
    Join Date
    Jun 2012
    Posts
    26
    Plugin Contributions
    0

    Default Re: Cannot disable SSL (Yes I've read the tutorial)

    Thank you!!!!

    Quote Originally Posted by DrByte View Post
    Just take out the "s" in the https in those rules.

  9. #9
    Join Date
    Jun 2012
    Posts
    26
    Plugin Contributions
    0

    Default Re: Cannot disable SSL (Yes I've read the tutorial)

    Quote Originally Posted by Andy-C27 View Post
    At the risk of not helping have you tried removing these 2 lines

    I only ask as I don't have those in my .hta just the other 2 lines.
    Although why would you want to remove SSL I had 1 for PayPal only as well ,it is almost a must these days
    Thank you! I am going to try what DrByte suggested and change the "https" to "http" in those two lines. I decided not to have the SSL because Paypal has its own security. I am only using Express Checkout, which redirects my customers to the Paypal site in order to pay, so all their private information gets submitted on the paypal website only.

  10. #10
    Join Date
    Jun 2012
    Posts
    26
    Plugin Contributions
    0

    Default Re: Cannot disable SSL (Yes I've read the tutorial)

    Quote Originally Posted by DrByte View Post
    Just take out the "s" in the https in those rules.
    That worked, thank you so much!! I also had to google how to get Safari to actually refresh a webpage and not load the cached one even after clearing the cache, without restarting. I had to hit "shift" and the refresh button at the same time. I learned a lot today!

 

 

Similar Threads

  1. Blank page on login, have read tutorial, issues persist
    By ivan23 in forum General Questions
    Replies: 2
    Last Post: 24 Oct 2009, 02:59 AM
  2. Enabling SSL Issues Yes I followed the Tutorial
    By DadsAttic in forum General Questions
    Replies: 9
    Last Post: 2 Dec 2008, 11:31 PM
  3. images... yes i read the thread.
    By zerocrew in forum Templates, Stylesheets, Page Layout
    Replies: 0
    Last Post: 16 Apr 2007, 06:25 PM
  4. Changin Logo (Ive read faq tutorial)
    By hudda in forum General Questions
    Replies: 1
    Last Post: 31 Dec 2006, 10:05 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg
Zen-Cart, Internet Selling Services, Klamath Falls, OR