Forums / General Questions / Help! Just got https Now everything is messed up!

Help! Just got https Now everything is messed up!

Locked

Started by hello on 17 Aug 2010, 5:24 PM · Views: 1,703

Results 1 to 14 of 14
This thread is locked. New replies are disabled.
17 Aug 2010, 5:24 PM
#1
hello avatar

hello

Zen Follower

Join Date:
Jul 2010
Posts:
100
Plugin Contributions:
0

Help! Just got https Now everything is messed up!

I am using v1.3.9b

Everything was fine. Now I installed the https and I can't add things to my shopping cart! I get this message when I add something:

**Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.

Are you sure you want to continue sending this information?**

Why is it saying this when everything is supposed to be secure?

Now It doesn't recognize my account that I set up earlier! I did a resend password and it says the email address is not on file.. it is! I also try to create a new account and it keep on bouncing to the same sign up page!

Did I set up the https wrong? Some don't have https: is that ok, I just follow the ssl instructions.

This is the Admin Configure.php

*// Define the webserver and path parameters
// Main webserver: eg-http://www.testingmysite1bc.com -
// HTTP_SERVER is your Main webserver: eg-http://www.testingmysite1bc.com
// HTTPS_SERVER is your Secure webserver: eg-https://www.testingmysite1bc.com
// HTTP_CATALOG_SERVER is your Main webserver: eg-http://www.testingmysite1bc.com
// HTTPS_CATALOG_SERVER is your Secure webserver: eg-https://www.testingmysite1bc.com
/

  • URLs for your site will be built via:
  • HTTP_SERVER plus DIR_WS_ADMIN or
    
  • HTTPS_SERVER plus DIR_WS_HTTPS_ADMIN or 
    
  • HTTP_SERVER plus DIR_WS_CATALOG or 
    
  • HTTPS_SERVER plus DIR_WS_HTTPS_CATALOG
    
  • ...depending on your system configuration settings
  • If you desire your entire admin to be SSL-protected, make sure you use a "https:" URL for all 4 of the following:
    */
    define('HTTP_SERVER', 'https://testingmysite1bc.com');
    define('HTTPS_SERVER', 'https://testingmysite1bc.com');
    define('HTTP_CATALOG_SERVER', 'https://testingmysite1bc.com');
    define('HTTPS_CATALOG_SERVER', 'https://testingmysite1bc.com');

// Use secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');**

This is the Includes/configure.php
**
// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com
// HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com
define('HTTP_SERVER', 'http://testingmysite1bc.com');
define('HTTPS_SERVER', 'https://testingmysite1bc.com');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/store/');
define('DIR_WS_HTTPS_CATALOG', '/store/');**

17 Aug 2010, 5:41 PM
#2
hello avatar

hello

Zen Follower

Join Date:
Jul 2010
Posts:
100
Plugin Contributions:
0

Re: Help! Just got https Now everything is messed up!

I just notice this

You may have to load the whole catalog into an HTTPS directory also. Please consult your host for the URL you will need

?? do I have to do this? I can't even use the Contact Me form! The whole site is wacky!

17 Aug 2010, 7:22 PM
#3
ajeh avatar

ajeh

Oba-san

Join Date:
Sep 2003
Location:
Ohio
Posts:
62,757
Plugin Contributions:
1

Re: Help! Just got https Now everything is messed up!

The message could be for a number of reasons ...

It would be easier if we could perhaps peek at your site to see what the cause of this is ...

Linda McGrath
If you have to think ... you haven't been zenned ...

**Did YOU buy the Zen Cart Team a cup of coffee and a donut today? Just click here to support the Zen Cart Team!!**

Are you using the latest? Perhaps you've a problem that's fixed in the latest version: [Upgrade today!]
Officially PayPal-Certified! Just click here

Try our Zen Cart Recommended Services - Hosting, Payment and more ...
Signup for our Announcements Forums to stay up to date on important changes and updates!

17 Aug 2010, 7:38 PM
#4
hello avatar

hello

Zen Follower

Join Date:
Jul 2010
Posts:
100
Plugin Contributions:
0

Re: Help! Just got https Now everything is messed up!

i think I set the https wrong in zen cart.. is the php right?

17 Aug 2010, 9:57 PM
#5
hello avatar

hello

Zen Follower

Join Date:
Jul 2010
Posts:
100
Plugin Contributions:
0

Re: Help! Just got https Now everything is messed up!

Do I have to move the site folders into a https folder.. something like a httpdocs folder? where do I find this folder? please help.

everything was fine before I try to install https: (ssl) on to the zen cart page

17 Aug 2010, 10:16 PM
#6
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,515
Plugin Contributions:
176

Re: Help! Just got https Now everything is messed up!

hello:

I just notice this

You may have to load the whole catalog into an HTTPS directory also. Please consult your host for the URL you will need

?? do I have to do this?

hello:

Do I have to move the site folders into a https folder.. something like a httpdocs folder? where do I find this folder?NO!
Unless your hosting company is using an old archaic configuration which requires all your SSL content to be served from an httpsdocs folder, then you DO NOT want to go duplicating your site needlessly. It's a RARE case where one would do that, and usually it's better to pick a better hosting service than to do the wasteful duplication.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

17 Aug 2010, 10:19 PM
#7
ajeh avatar

ajeh

Oba-san

Join Date:
Sep 2003
Location:
Ohio
Posts:
62,757
Plugin Contributions:
1

Re: Help! Just got https Now everything is messed up!

Looks like either someone has written the configure.php files incorrectly or you have rewrites happening on your site ...

Since going to:
http://www.your_domain_name.com

automatically changes to a secure URL, this tells me you have rewrites happening ... at a minimum ...

Either you set these up or your hosting company did ... and things should not be setup in that manner ...

Linda McGrath
If you have to think ... you haven't been zenned ...

**Did YOU buy the Zen Cart Team a cup of coffee and a donut today? Just click here to support the Zen Cart Team!!**

Are you using the latest? Perhaps you've a problem that's fixed in the latest version: [Upgrade today!]
Officially PayPal-Certified! Just click here

Try our Zen Cart Recommended Services - Hosting, Payment and more ...
Signup for our Announcements Forums to stay up to date on important changes and updates!

17 Aug 2010, 10:47 PM
#8
hello avatar

hello

Zen Follower

Join Date:
Jul 2010
Posts:
100
Plugin Contributions:
0

Re: Help! Just got https Now everything is messed up!

Thanks for all your help.. So this should have been easy?

One get SSL for the main site

Two: after ssl for the main site.. just put in the https: in the two php files as mention in the zen cart ssl tutorials and that's it?? No need to upload folders or to secure all the folders..etc?

I'm using justhost for my host.

ps. did I do the php files right?

17 Aug 2010, 11:57 PM
#9
hello avatar

hello

Zen Follower

Join Date:
Jul 2010
Posts:
100
Plugin Contributions:
0

Re: Help! Just got https Now everything is messed up!

don't know if this helps.

After I got the https for my main site. I went to the zen cart admin page to make a few changes.. it gave me a pop up about this is a secure site.. third party or something like that but when I try to save or make changes to the zen cart site It won't let me.. it just stay the same.

After I went to the two php files and changed it to https then I stop receiving the messages and was able to change the site.. is this normal?

18 Aug 2010, 12:07 AM
#10
ajeh avatar

ajeh

Oba-san

Join Date:
Sep 2003
Location:
Ohio
Posts:
62,757
Plugin Contributions:
1

Re: Help! Just got https Now everything is messed up!

Pretty positive that this is a server issue with how your domain is setup ...

More than likely your domain is set to force secure pages rather than let the code manage this for you ...

This means the two are fighting with one another and that isn't going to allow things to work properly ...

Linda McGrath
If you have to think ... you haven't been zenned ...

**Did YOU buy the Zen Cart Team a cup of coffee and a donut today? Just click here to support the Zen Cart Team!!**

Are you using the latest? Perhaps you've a problem that's fixed in the latest version: [Upgrade today!]
Officially PayPal-Certified! Just click here

Try our Zen Cart Recommended Services - Hosting, Payment and more ...
Signup for our Announcements Forums to stay up to date on important changes and updates!

18 Aug 2010, 3:38 PM
#11
hello avatar

hello

Zen Follower

Join Date:
Jul 2010
Posts:
100
Plugin Contributions:
0

Re: Help! Just got https Now everything is messed up!

The CS Rep said there were http links on the site and in the php files. So I'm going to work on those. I still think they have a faulty ssl.. it keeps on switching!

But can you please help me with this problem.

Mostly it's the store area (the zen cart page) where all the problems are. I Linked two pictures on the front page from my https main homepage (I made sure the picture say https (I drag the picture to the browser and it says https)

BUT when I save it and view picture source it says http!!!! ahhhhhhhhh!! How come!!! What can I do?

18 Aug 2010, 6:07 PM
#12
ajeh avatar

ajeh

Oba-san

Join Date:
Sep 2003
Location:
Ohio
Posts:
62,757
Plugin Contributions:
1

Re: Help! Just got https Now everything is messed up!

Please understand this and try to make your host understand this ...

I go to:
http://www.your_domain_name.com

I am magically redirected to:
https://www.your_domain_name.com

Right there something is controlling your domain and needs to be fixed ...

I go to:
http://www.your_domain_name.com/store

I am magically redirected to:
https://www.your_domain_name.com/store

Until you fix the first problem, the Zen Cart store CANNOT be fixed as it is being controlled by incorrect settings on your domain ...

These may be in an .htaccess file ...

Speak to your host and find out why your site is currently change to secure when you try to go to the non-secure:
http://www.your_domain_name.com

Linda McGrath
If you have to think ... you haven't been zenned ...

**Did YOU buy the Zen Cart Team a cup of coffee and a donut today? Just click here to support the Zen Cart Team!!**

Are you using the latest? Perhaps you've a problem that's fixed in the latest version: [Upgrade today!]
Officially PayPal-Certified! Just click here

Try our Zen Cart Recommended Services - Hosting, Payment and more ...
Signup for our Announcements Forums to stay up to date on important changes and updates!

18 Aug 2010, 8:12 PM
#13
hello avatar

hello

Zen Follower

Join Date:
Jul 2010
Posts:
100
Plugin Contributions:
0

Re: Help! Just got https Now everything is messed up!

I don't get it? I thought that was normal? Because people normally type in www. instead of https:// So it'll be redirected to the secure site.

You mean https: and www. is supposed to be different?

let's say https://www._your_domain_name.com is secure

but if you just type in www._your_domain_name.com it's supposed to be just www.your_domain_name.com and not come up as https://www.your_domain_name.com ??? if so where's the security?

ps. I still have to get rid of all the http links right so I don't get that pop up? man, I go to view source and see those and don't know where to look for them :( usually it's in the includes folder?

18 Aug 2010, 11:42 PM
#14
ajeh avatar

ajeh

Oba-san

Join Date:
Sep 2003
Location:
Ohio
Posts:
62,757
Plugin Contributions:
1

Re: Help! Just got https Now everything is messed up!

If I type in http: //www.amazon.com I will not be redirected to https: //www.amazon.com ...

I do not need to be on a secure page until I go to checkout ... then I will be taken to a secure page ...

The same is true with Zen Cart ...

You do not need to be on a secure page until you are creating an account, checking out ... etc. etc. etc.

For these things, Zen Cart "controls" when you need to be secure or not ...

Your site is "forcing" everything to be secure when it does not need to be and is trying to switch things to secure where Zen Cart is rendering the pages one way and your site is redirecting the pages against how the pages are being rendered ...

Zen Cart controls everything based on the settings in the configuration settings of the configure.php files ...

Only when the pages need to be secure will the pages be secure ...
But if your server vhost or SSL is misconfigured then nothing is going to work.

Linda McGrath
If you have to think ... you haven't been zenned ...

**Did YOU buy the Zen Cart Team a cup of coffee and a donut today? Just click here to support the Zen Cart Team!!**

Are you using the latest? Perhaps you've a problem that's fixed in the latest version: [Upgrade today!]
Officially PayPal-Certified! Just click here

Try our Zen Cart Recommended Services - Hosting, Payment and more ...
Signup for our Announcements Forums to stay up to date on important changes and updates!