Problems with SSL and Images

[mudcreek]

Hey Everyone,

I have installed a private SSL from a dedicated server and all seems well other than once the customer logs in, the ssl engages and most of my images go to pot.


http://www.mudcreekarchery.com

This must be what they call the "non-secure" items that are displayed. How do I secure them so it doesn't look like garbage once someone commits to a sale?

1.3.0.1
Thanks for the help.

Muddy

[jund]

Hey Everyone,

I have installed a private SSL from a dedicated server and all seems well other than once the customer logs in, the ssl engages and most of my images go to pot.


http://www.mudcreekarchery.com

This must be what they call the "non-secure" items that are displayed. How do I secure them so it doesn't look like garbage once someone commits to a sale?

1.3.0.1
Thanks for the help.

Muddy

I tried to reply to your note - but confused myself so bad, that I deleted it.
However, you have some kind of problem with your SSL certificate and the links to your images. The URL www.mudcreekarchery.com sends me to mudcreekarchery.com (no www) and when you go to the https links - they have to match what your SSL Certificate states (with or without the www).

respectfully,
jund

[jund]

I tried to reply to your note - but confused myself so bad, that I deleted it.
However, you have some kind of problem with your SSL certificate and the links to your images. The URL www.mudcreekarchery.com sends me to mudcreekarchery.com (no www) and when you go to the https links - they have to match what your SSL Certificate states (with or without the www).

respectfully,
jund

NOTE When I click on sign in - it goes to https: URL and I get a certificate error... however, if I add the www to the URL in the address bar, it clears the certificate error. Also, your graphics that fail are pointing to a non-www location - hope this is not more confusing.

respectfully,
jund

[mudcreek]

Thanks Jund,

Sorry to say I am a bit more confused.

My host assures me that the certificate was installed for www.mudcreekarchery.com so as far as the www or no www I'm completely in the dark.

This would probably be one of those times when I would not look crosseyed at someone who tried to explain this to me like I was a two year old. How do I point my images to a www? What is the difference- http, https?

Any and all help is appreciated, I usually retain the lesson better having been completely confused before hand!!!!

Thanks again,

Muddy

[jund]

I cannot help you without some of your file information... you need to check your configure files (there are two, one in admin and one in the catalog) - I cannot give you the help you need - I apologize.
jund

[mudcreek]

Thanks for trying.

My includes/config files are set to true for enabling SSL. I set them to false in the admin/includes/config for the SSL Admin and Catalog. I didn't want the pics ruining the entire visit.

Anyone else?

[mudcreek]

Nobody?

I moved all of my images to the root directory, disabled the SSL, re-enabled the SSL, changed my https to www.mudcreekarchery.com instead of mudcreekarchery.com.

I've tried everything I can find in the forums with no luck. I read about images being hard coded but I don't know what that entails enough to change it.

I could use some help, any ideas are welcome.

Thanks,

Muddy

[Merlinpa1969]

in your cpanel,
remember to put the SSL url in the hotlink protection

thats the problem

[jund]

Something is messed up in your configuration...
Please upload to the forum: /includes/configure.php

IMPORTANT: ENSURE YOU DO NOT INCLUDE your user name, password information... see example I have posted for you.
And, then we can look at your configuration.

Thanks,
jund

Just in case the upload does not look correct - I have included a paste right here in the forum as an example of mine.

<?php
/**
*
* @package Configuration Settings
* @copyright Copyright 2003-2006 Zen Cart Development Team
* @copyright Portions Copyright 2003 osCommerce
* @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
*/

/*************** NOTE: This file is similar, but DIFFERENT from the "admin" version of configure.php. ***********/
/*************** The 2 files should be kept separate and not used to overwrite each other. ***********/
// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
define('HTTP_SERVER', 'http://www.imagesbydavido.com');
define('HTTPS_SERVER', 'https://www.imagesbydavido.com/gallery_web');
// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');
// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/gallery_web/');
define('DIR_WS_HTTPS_CATALOG', '/');
define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/');

[mudcreek]

Thanks for the help.

I already have the SSL enabled in the Hotlink Protection and I'm still having trouble.

I'm posting my includes configure as follows:

<?php
/**
*
* @package Configuration Settings
* @copyright Copyright 2003-2006 Zen Cart Development Team
* @copyright Portions Copyright 2003 osCommerce
* @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
*/


// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
define('HTTP_SERVER', 'http://mudcreekarchery.com');
define('HTTPS_SERVER', 'https://www.mudcreekarchery.com');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/zencart/');
define('DIR_WS_HTTPS_CATALOG', '/zencart/');

define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/');

define('DIR_WS_PHPBB', '/');




My SSL was configured for www.mudcreekarchery.com if that matters in all of this. Thanks again.

Muddy