https not working on main page

[asdco]

<jamisoncorp.com> When going to my site it opens in http once I click on any link in the store it changes to https. I have changed http server to https but that does not fix the problem. My store is on vps/cloud and I have webmin panel. I do not want my store to open as http how do I fix this?

[mc12345678]

There are three ways that have been identified to force the first page loaded (main page or any other) to be loaded under https. The cPanel of your host can be set to redirect all requests to https, there is a code modification that has been suggested for version 1.5.6 (should be compatible with earlier versions as well) and there is a command that can be put into an .htaccess file that would have to be placed in the root of your store.

Otherwise, what is described is normal behavior for the software.

[carlwhat]

if you wanted to do it within ZC, there are 2 new scripts, and 1 modification to an existing one. you can see those changes here:

https://github.com/zencart/zencart/p...s?diff=unified

best.

[asdco]

# This is used with Apache WebServers
#
# The following blocks direct HTTP requests to all filetypes in this directory recursively, except certain approved exceptions
# It also prevents the ability of any scripts to run. No type of script, be it PHP, PERL or whatever, can normally be executed if ExecCGI is disabled.
# Will also prevent people from seeing what is in the dir. and any sub-directories
#
# For this to work, you must include either 'All' or at least: 'Limit' and 'Indexes' parameters to the AllowOverride configuration in your apache/conf/httpd.conf file.
# Example:
#<Directory "/usr/local/apache/htdocs">
# AllowOverride Limit Indexes
#</Directory>
###############################
RewriteCond %{HTTP_HOST} jamisoncorp\.com [NC]
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://jamisoncorp.com/$1 [R,L]#
<Limit GET POST PUT>
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order Allow,Deny
Deny from all
</IfModule>
</Limit>

#NOBODY SHOULD BE SNOOPING HERE

# deny *everything*
<FilesMatch ".*">
<IfModule mod_authz_core.c>
Require all denied
</IfModule>
<IfModule !mod_authz_core.c>
Order Allow,Deny
Deny from all
</IfModule>
</FilesMatch>

IndexIgnore */*

This is what my htaccess looks like after adding the 3 lines of code at the top given by whynopadlock;

Below code is for forcing HTTPs on an Apache webserver. If you are using another webserver such as lighttpd, nginx, etc you will need to contact your web hosting provider for assistance.

Add the following code to the .htaccess file in your webhosting account:

RewriteCond %{HTTP_HOST} jamisoncorp\.com [NC]
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://jamisoncorp.com/$1 [R,L]

I installed the script and it makes no difference, still no ssl on main page

[carlwhat]

prior to your 3 lines of code, add the following line:

RewriteEngine On

[asdco]

prior to your 3 lines of code, add the following line:

RewriteEngine On

ok I added that and still the same. I also went to my webmin control panei and did a redirect; http://www.jamisoncorp.com TO https://www.jamisoncorp.com that did not work either.

[carlwhat]

cpanel changes are just writing to the htaccess file. i would stick with manually editing your htaccess file.

at this point one would need to question if it is named correctly as well as in the correct directory with the correct permissions.

i would contact your hosting company about the answers to these questions as they should be able to help w these issues.

[asdco]

cpanel changes are just writing to the htaccess file. i would stick with manually editing your htaccess file.

at this point one would need to question if it is named correctly as well as in the correct directory with the correct permissions.

i would contact your hosting company about the answers to these questions as they should be able to help w these issues.

thank you I will do that today actually I did that once before but I'll try again. Their answer was that the problem was in the zencart program and passed the problem onto me lol but I'll try again

[carlwhat]

htacess happens BEFORE zencart touches anything. try to be very specific with your hosting company. its all about those 3 lines in your .htaccess file and those apache directives happen before zencart does anything.

best.