Results 1 to 3 of 3
  1. #1
    Join Date
    Apr 2005
    Posts
    392
    Plugin Contributions
    0

    Default Login Page is No Secured Even With SSL Installed

    I discovered that my login page for some unknown reason is not secured even after SSL was installed. I have tried the following code which Linda suggested here

    Code:
    <?php
    $request_type = ((isset($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) == 'on') || (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == '1') || (isset($_SERVER['HTTP_X_FORWARDED_BY']) && strstr(strtoupper($_SERVER['HTTP_X_FORWARDED_BY']),'SSL')) || (isset($_SERVER['HTTP_X_FORWARDED_HOST']) && strstr(strtoupper($_SERVER['HTTP_X_FORWARDED_HOST']),'SSL')) || (isset($_SERVER['SCRIPT_URI']) && strtolower(substr($_SERVER['SCRIPT_URI'], 0, 6)) == 'https:') || (isset($_SERVER['SERVER_PORT']) && $_SERVER['SERVER_PORT'] == '443' ) ) ? 'SSL' : 'NONSSL';
    echo 'I SEE ' . $request_type;
    ?>
    The result was as expected. That is, "I SEE NOSSL" at non-secure page and "I SEE SSL" at secure page.

    Setting in include/configure.php files:
    define('HTTP_SERVER', 'http://www.mysite.com');
    define('HTTPS_SERVER', 'https://www.mysite.com');

    // Use secure webserver for checkout procedure?
    define('ENABLE_SSL', 'true');


    Setting in include/configure.php files:
    define('HTTP_SERVER', 'https://www.mysite.com');
    define('HTTPS_SERVER', 'https://www.mysite.com');
    define('HTTP_CATALOG_SERVER', 'http://www.mysite.com');
    define('HTTPS_CATALOG_SERVER', 'https://www.mysite.com');

    // Use secure webserver for catalog module and/or admin areas?
    define('ENABLE_SSL_CATALOG', 'true');
    define('ENABLE_SSL_ADMIN', 'true');

    Access to the admin page has not problem, I get redirected to the secure admin page even when I key in http://www.mysite.com/admin (rather then https://). Can anyone shed some light on this peculiarity? Thank you very much.

  2. #2
    Join Date
    Sep 2004
    Location
    MONTANA!!!
    Posts
    105
    Plugin Contributions
    0

    Default Re: Login Page is No Secured Even With SSL Installed

    Interesting. Would you mind giving more specifics? Like your mods? And, I really have to see it in action. So, a url would be nice.

  3. #3
    Join Date
    Apr 2005
    Posts
    392
    Plugin Contributions
    0

    Default Re: Login Page is No Secured Even With SSL Installed

    I believe I have found the reason for the said issue. It has something to do with the Ultimate SEO mod. which was installed not long ago. Turning it off seems to solve the issue.

    I'll be back with more info. when I find out more.

 

 

Similar Threads

  1. Secured Pages with SSL after Zen Cart install
    By pcsdesign in forum General Questions
    Replies: 6
    Last Post: 28 Dec 2010, 02:13 AM
  2. SSL secured page with errors
    By maclancer in forum General Questions
    Replies: 3
    Last Post: 30 Apr 2008, 12:46 PM
  3. Login page a mess after SSL installed
    By mamasylvia in forum Templates, Stylesheets, Page Layout
    Replies: 4
    Last Post: 21 Mar 2008, 03:50 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg
Zen-Cart, Internet Selling Services, Klamath Falls, OR