Can't add to cart and can't login as a customer or create a new account

[lidlchris]

[Note: remember to include site URL, ZC version, list of plugins, PHP version, etc ... read the Posting Tips shown above for information to include in your post here. And, remove this comment before actually posting!]

Having so many problems with my site but this one is Major. I can't add anything to the cart. I can't create a new account. I can't login to an existing account. I'm so lost. Swordsofhonor.com

[swguy]

Start by fixing your SSL issue.

[lidlchris]

Start by fixing your SSL issue.

Darn i thoughti did. I followed the directions to update the configure.php files and added the coding to the htaccess file.

[swguy]

That's necessary but not sufficient. You are still loading images over http. Do a view source and search for "http:" and you'll see.

[mc12345678]

That's necessary but not sufficient. You are still loading images over http. Do a view source and search for "http:" and you'll see.

Note, there are some things/links that will still have http: in them and are acceptable, but html tag that has src="http: will most certainly cause the mixed content errors.

[mc12345678]

Darn i thoughti did. I followed the directions to update the configure.php files and added the coding to the htaccess file.

If the htaccess rewrite to force all pages to https is used, then could save the server some trouble and modify the includes/configure.php file to set both HTTP_SERVER and HTTPS_SERVER to begin with https:

That action is also described in the associated FAQ: https://www.zen-cart.com/content.php...alled-zen-cart

[swguy]

Right, but this won't help if he has modified a file somewhere to display an image using <img src="http://....".

[dbltoe]

I feel I still need to mention what we ran in to on a couple of sites. While the https: config changes are important, if the www versus non-www is not consistent, Zen Cart will do funny things including not allowing login.

The ssl would be best set as either www or non-www not both. Then all configs should reflect either www or non-www accordingly. Lastly, any htaccess or 301 redirect should go to the https that matches the www or non-www.

To me, thee embedded http: links are necessary but the other needs to be correct first.