Page 2 of 4 FirstFirst 1234 LastLast
Results 11 to 20 of 39
  1. #11
    Join Date
    Jul 2012
    Posts
    16,718
    Plugin Contributions
    17

    Default Re: Switching to 100% SSL (https) - Thoughts?

    Quote Originally Posted by Feznizzle View Post
    By "better solution" are you referring to something like HSTS? Or HSTS preloading?

    Also, by "better solution" are you implying that the code I referenced has drawbacks? The reload?

    If reload is problematic, how can I get rid of it... but keep the 301?
    From a general perspective I see nothing particular as a drawback to what is/was provided. I'm guessing (hoping?) that you did an Internet search on how to redirect non-SSL to SSL or some similar search. If so, you will have seen that there are a number of ways to implement such a redirect. Some check for port, some if https: is present, etc... any/all should suffice generally speaking, and any/all may work, but there could also be one that doesn't which if chosen could lead to aggravation. I look at from the perspective that anything in an htaccess file slows down the user from getting to the next action. Yes, it serves a purpose whether to actually offer security or to do redirects. The host though knows (or should know) their system and what offers the maximum result with the minimal load. Yes, there may be operations that are more internally controlled/can be setup, host knows that. Not me. :)
    ZC Installation/Maintenance Support <- Site
    Contribution for contributions welcome...

  2. #12
    Join Date
    Apr 2010
    Posts
    897
    Plugin Contributions
    0

    Default Re: Switching to 100% SSL (https) - Thoughts?

    FYI, in case anybody else stumbles in here, do NOT change this line to false in your config file:
    define('ENABLE_SSL', 'true');

    If you are using Authorize.net payment mod (maybe others as well?), the payment options offered to your customers during checkout will disappear!

    Thank goodness some customer came along and called to complain or we might never have known!

  3. #13
    Join Date
    Feb 2006
    Location
    Tampa Bay, Florida
    Posts
    9,622
    Plugin Contributions
    123

    Default Re: Switching to 100% SSL (https) - Thoughts?

    For folks who are doing this: be sure to *carefully test* any mods you have installed to ensure that they respect the use of SSL. Some older mods/less carefully created mods may not, and you want to catch this before your customers do.

    A very useful tool in this testing is Chrome Developer tools. Open it from the 3 stacked dots menu at the upper right, and switch to Console. You want to look for pink(red) error messages in your console - these indicate failures which, in this case, are likely caused by mixed content.
    That Software Guy. My Store: Zen Cart Modifications
    Available for hire - See my ad in Services
    Plugin Moderator, Documentation Curator, Chief Cook and Bottle-Washer.
    Do you benefit from Zen Cart? Then please support the project.

  4. #14
    Join Date
    Jun 2007
    Location
    Eustis, Florida, USA, EARTH
    Posts
    836
    Plugin Contributions
    0

    Default Re: Switching to 100% SSL (https) - Thoughts?

    I switched servers and did an upgrade to 155e. http works fine but if I try to use https I get the zc failed connection to database error page. I have both config files set for https and enabled. Cant figure out why this is giving me grief.

  5. #15
    Join Date
    Jun 2007
    Location
    Eustis, Florida, USA, EARTH
    Posts
    836
    Plugin Contributions
    0

    Default Re: Switching to 100% SSL (https) - Thoughts?

    OK, I uninstalled letsencrypte and reinstalled and now everything is hunky dory.

    https://www.phrases.org.uk/meanings/hunky-dory.html

  6. #16
    Join Date
    Aug 2011
    Posts
    2
    Plugin Contributions
    0

    Default Re: Switching to 100% SSL (https) - Thoughts?

    I've been looking to switch my site to https for a while but always run into a problem with caching. I use a MagneticOne Performance module that caches the site http pages but not the checkout https pages. Is there something better I should switch to that will cache those pages before checkout and still work with https? I do get a fair amount of traffic and without caching that causes a lot of hits to my database.

    Thanks for you thoughts.

  7. #17
    Join Date
    Jan 2008
    Posts
    103
    Plugin Contributions
    0

    Default Re: Switching to 100% SSL (https) - Thoughts?

    Hi all, after receiving several complaints from (non-tech-savvy) customers about the "entering an unsecure site..." browser messages that appear when first visiting my homepage, I added the 301 redirect to send all non-https traffic to https. At first it seemed like it was working exactly as intended--but then my customers were complaining the "contact us" form wasn't working properly and they weren't able to send me any messages. When I removed the redirect, it worked just fine. I really want to have the https traffic to avoid customers thinking my site is not secure (we have SSL, etc.) but I also need the contact us form to work as well. Any thoughts/ideas? Any help would be greatly appreciated!

  8. #18
    Join Date
    Jul 2012
    Posts
    16,718
    Plugin Contributions
    17

    Default Re: Switching to 100% SSL (https) - Thoughts?

    Quote Originally Posted by mcqueeneycoins View Post
    Hi all, after receiving several complaints from (non-tech-savvy) customers about the "entering an unsecure site..." browser messages that appear when first visiting my homepage, I added the 301 redirect to send all non-https traffic to https. At first it seemed like it was working exactly as intended--but then my customers were complaining the "contact us" form wasn't working properly and they weren't able to send me any messages. When I removed the redirect, it worked just fine. I really want to have the https traffic to avoid customers thinking my site is not secure (we have SSL, etc.) but I also need the contact us form to work as well. Any thoughts/ideas? Any help would be greatly appreciated!
    So besides adding an htaccess redirect to try to force all visits to https: what have you done to implement https on your site? To me the above implies that that is all that has been done and nothing else even though this thread contains if not mistaken all of the things that need to be changed to enable full site SSL.
    ZC Installation/Maintenance Support <- Site
    Contribution for contributions welcome...

  9. #19
    Join Date
    Aug 2005
    Posts
    334
    Plugin Contributions
    0

    Default Re: Switching to 100% SSL (https) - Thoughts?

    Hello,

    I am in beginning of the conversion process to SSL.

    There is an admin option in SESSIONS called "Check SSL Session ID" -> Validate the SSL_SESSION_ID on every secure HTTPS page request.

    I have it now as "false".

    Should it to be turned to "true" after SSL is installed?

    Thank you.

  10. #20
    Join Date
    Aug 2005
    Posts
    334
    Plugin Contributions
    0

    Default Re: Switching to 100% SSL (https) - Thoughts?

    Hello,

    Can somebody comment about reason that page is not secure, because of images:

    Attachment 17508

    Images, when I check them, are located under https//: area like this:

    https://www.my_site.com/store/images/name_of_images.jpg

    Your advice will be greatly appreciated.

 

 
Page 2 of 4 FirstFirst 1234 LastLast

Similar Threads

  1. v151 switching PayPal IPN Verification Postback to HTTPS
    By moogawooga in forum General Questions
    Replies: 14
    Last Post: 28 Dec 2017, 08:08 AM
  2. Switching to https from http changed php
    By Goldenis in forum General Questions
    Replies: 1
    Last Post: 15 Apr 2011, 10:27 AM
  3. Positive SSL problem? Not switching to the HTTPS url during Checkout
    By whatisthat456 in forum General Questions
    Replies: 2
    Last Post: 13 Dec 2009, 09:45 AM
  4. switching from http to https
    By metamp in forum Basic Configuration
    Replies: 1
    Last Post: 8 Feb 2007, 09:00 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg
Zen-Cart, Internet Selling Services, Klamath Falls, OR