Zen Cart Logo
Forums / General Questions / Forcing non-SSL for cart

Forcing non-SSL for cart

Views: 551

Results 1 to 5 of 5
12 Jan 2012, 9:05 AM
#1
donn avatar

donn

Zen Follower

Join Date:
Oct 2007
Posts:
241
Plugin Contributions:
0

Forcing non-SSL for cart

I have a 1.3.9H cart, and it's a showcase only.

Is there a way to disable SSL on all pages, admin included?

12 Jan 2012, 10:00 AM
#2
schoolboy avatar

schoolboy

Totally Zenned

Join Date:
Jun 2005
Location:
Cumbria, UK
Posts:
10,327
Plugin Contributions:
0

Re: Forcing non-SSL for cart

If you are allowing people to REGISTER, and you have SSL, it is a good idea to leave SSL in place, largely because it demonstrates to your users that you take their data protection seriously. So you show a degree of professionalism and get their respect.

As it is SHOWCASE only, the only instances of SSL being invoked will be when account holders register and subsequently login. Zencart does not use SSL when it is not needed. The site will operate under HTTP on all other occasions.

Similarly, with ADMIN... SSL is invoked only when needed.

My suggestion is that if you have SSL, then leave it as it is. There is no "down-side" in terms of site speed, and as I have mentioned, it offers significant protection for sensitive data transfers.

12 Jan 2012, 3:24 PM
#3
donn avatar

donn

Zen Follower

Join Date:
Oct 2007
Posts:
241
Plugin Contributions:
0

Re: Forcing non-SSL for cart

The new FireFox version, 9.0.1, does not allow, as a default, a user to access a web page with an SSL Certificate that does not match properly.

In previous versions of FireFox, I'd get a warning box about the SSL Certificate, but as I thought it was only in the Admin, I wasn't really concerned. I didn't think SSL was ever used with a showcase, as far as the catalog side.

Now, with the new FireFox, the Admin is inaccessible, unless using IE.

A pop-up box states, 'The URL is Not Valid and Cannot be Loaded' when I use 9.0.1. (in FF v 9.0.1)

And, setting up the showcase, I realized that the following functions yield the same pop-up box for the user:

-Tell A Friend

-Notify Me of Updates

and

-Leave a Review

Are these even available with a showcase?
Must a user register/login to access these functions?

Or, is this because of the mismatched SSL Certificate?
(correct IP, correct server, incorrect URL)

12 Jan 2012, 3:44 PM
#4
donn avatar

donn

Zen Follower

Join Date:
Oct 2007
Posts:
241
Plugin Contributions:
0

Re: Forcing non-SSL for cart

Testing this with IE, I could get to a Registration screen, but only after a warning regarding the SSL Certificate.

So, I'm guessing that with a Showcase, these functions work, and it was just the SSL/Firefox thing.

Users can have accounts with a Showcase? That's what it looked like. This is my first showcase, so I was unaware that this is so.

Can any of those three above mentioned functions be set to work with non-registered users, as well as registered showcase visitors?

12 Jan 2012, 4:40 PM
#5
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
177

Re: Forcing non-SSL for cart

If you've decided that you don't need SSL for any purpose, set the ENABLE_SSL accordingly in your /includes/configure.php file. If this is set to 'false' then Zen Cart will only use the HTTP_SERVER value for generating URLs when serving any of its pages.