Configure.php with SSL Shared

New installation of 1.5 -- after I try to sign-in, I get a "page not found" because the URL has the domain name in it twice. I have tried removing it, but then I get no domain name at all. Thanks for your help.

admin/includes/configure.php:
define('HTTP_SERVER', 'https://ssl.perfora.net/rdswebs.net');
define('HTTPS_SERVER', 'https://ssl.perfora.net/rdswebs.net/michellegibson.net');
define('HTTP_CATALOG_SERVER', 'http://michellegibson.net');
define('HTTPS_CATALOG_SERVER', 'https://ssl.perfora.net/rdswebs.net/michellegibson.net');

URL requested after login:
https://ssl.perfora.net/rdswebs.net/michellegibson.net/ ...
michellegibson.net/store/adminXXX/index.php

rayw1679:

define('HTTP_SERVER', 'https://ssl.perfora.net/rdswebs.net');

define('HTTPS_SERVER', 'https://ssl.perfora.net/rdswebs.net/michellegibson.net');

define('HTTPS_CATALOG_SERVER', 'https://ssl.perfora.net/rdswebs.net/michellegibson.net');

None of those are valid server names.

rayw1679:

define('HTTP_CATALOG_SERVER', 'http://michellegibson.net');

That is what a valid server name should look like.

Notice the difference? A valid serve rname consists of
http:// (or https://) followed by a name. then a dot, then a suffix (com, net, org, etc) and NOTHING MORE.

The stuff that you have following this, namely /rdswebs.net, etc are paths to the files on the server and as such need to be placed in the** path** settings of the configuration file(s).

Cheers
Rod

RodG -- Thank you so much for responding.

I copied those names from another copy of the store I am running on 1.3.8a. It works fine there.

I can go into the "store" side and sign-in and create an ID with no problem. I can go into "admin" and get to the sign-on screen. After that is when I get the duplicate domain name in the URL, which obviously results in a "page not found."

sss.perfora.net is the shared certificate of my host, 1and1. rdswebs.net is the name of my server.

In the future, I'll probably go to a designated SSL certificate; however, this is a "trial project" for my daughter and the certificate would cost more than she may make from the store.

I changed it to this:
define('HTTP_SERVER', 'https://ssl.perfora.net/rdswebs.net');
define('HTTPS_SERVER', 'https://ssl.perfora.net/rdswebs.net');
define('HTTP_CATALOG_SERVER', 'http://michellegibson.net');
define('HTTPS_CATALOG_SERVER', 'https://michellegibson.net');
and I can't even get to the admin sign-on screen (instead of two "michellegibson.net" in the domain, there is none).

I'm sorry if I'm not understanding you, but I'm very confused.

Typically, I've received extremely fast resolutions from this forum (most often from Ajeh). I can only assume I've committed one of the following mistakes:
(1) I don't understand the answer. That's possibe; I'm now disabled and on multiple prescription painkillers, so I often misunderstand. If that's the case, please bear with me; you may be in the same situation someday (although I hope not).
(2) Everyone thinks I should use a private SSL certificate. I may do so in the future, but I promise the instructions say shared certificates work (and I'm using same on my Reliable Go-Karts store on an earlier release), so I didn't see any reason to waste the money. I'd rather send the money to Zen Ventures, LLC (see # 3).
(3) I've upset people by not buying the ZenCart team a cup of coffee. Guilty, no excuse. My check (Reliable Go-Karts) is in the mail. I'm sending $100, and it won't be my last.

rayw1679:

Typically, I've received extremely fast resolutions from this forum (most often from Ajeh). I can only assume I've committed one of the following mistakes.

Possibly #1, but not #2, and certainly not#3

Could you post a copy of your config file (blank out the sensitive DB information).

There have been a number of changes in this file with V1.5 release and this may be the easiest way to sort it out.

It'll help other spot the problem too.

Cheers
Rod

This is the latest copy, per your recommended change. Thank you very much for helping.

<?php /** * @package Configuration Settings circa 1.5.0 * @copyright Copyright 2003-2011 Zen Cart Development Team * @copyright Portions Copyright 2003 osCommerce * @license <http://www.zen-cart.com/license/2_0.txt> GNU Public License V2.0 * File Built by zc_install on 2012-03-10 01:10:53 */ /*************** NOTE: This file is similar, but DIFFERENT from the "store" version of configure.php. ***********/ /*************** The 2 files should be kept separate and not used to overwrite each other. ***********/ /** * WE RECOMMEND THAT YOU USE SSL PROTECTION FOR YOUR ENTIRE ADMIN: * To do that, make sure you use a "https:" URL for BOTH the HTTP_SERVER and HTTPS_SERVER entries: */ define('HTTP_SERVER', 'https://ssl.perfora.net/rdswebs.net'); define('HTTPS_SERVER', 'https://ssl.perfora.net/rdswebs.net'); define('HTTP_CATALOG_SERVER', 'http://michellegibson.net'); define('HTTPS_CATALOG_SERVER', 'https://michellegibson.net'); // secure webserver for admin? Valid choices are 'true' or 'false' (including quotes). define('ENABLE_SSL_ADMIN', 'true'); // secure webserver for storefront? Valid choices are 'true' or 'false' (including quotes). define('ENABLE_SSL_CATALOG', 'true'); // NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes! // * DIR_WS_* = Webserver directories (virtual/URL) // these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder) $t1 = parse_url(HTTP_SERVER);$p1 = $t1['path'];$t2 = parse_url(HTTPS_SERVER);$p2 = $t2['path']; define('DIR_WS_ADMIN', preg_replace('#^' . str_replace('-', '\-', $p1) . '#', '', dirname($_SERVER['SCRIPT_NAME'])) . '/'); define('DIR_WS_CATALOG', '/store/'); define('DIR_WS_HTTPS_ADMIN', preg_replace('#^' . str_replace('-', '\-', $p2) . '#', '', dirname($_SERVER['SCRIPT_NAME'])) . '/'); define('DIR_WS_HTTPS_CATALOG', '/store/'); define('DIR_WS_IMAGES', 'images/'); define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/'); define('DIR_WS_CATALOG_IMAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'images/'); define('DIR_WS_CATALOG_TEMPLATE', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/templates/'); define('DIR_WS_INCLUDES', 'includes/'); define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/'); define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/'); define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/'); define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/'); define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/'); define('DIR_WS_CATALOG_LANGUAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/languages/'); // * DIR_FS_* = Filesystem directories (local/physical) define('DIR_FS_ADMIN', realpath(dirname(__FILE__) . '/../') . '/'); //the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/ define('DIR_FS_CATALOG', '/homepages/5/d232125156/htdocs/michellegibson.net/store/'); define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/'); define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/'); define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/'); define('DIR_FS_CATALOG_TEMPLATES', DIR_FS_CATALOG . 'includes/templates/'); define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/'); define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/'); define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/'); // define our database connection define('DB_TYPE', 'mysql'); define('DB_PREFIX', ''); define('DB_CHARSET', 'utf8'); define('DB_SERVER', 'localhost:/tmp/mysql5.sock'); define('DB_SERVER_USERNAME', 'dboxxxxxxxxx'); define('DB_SERVER_PASSWORD', 'xxxxxxxxx'); define('DB_DATABASE', 'dbxxxxxxxxx'); // The next 2 "defines" are for SQL cache support. // For SQL_CACHE_METHOD, you can select from: none, database, or file // If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache // or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder // ie: /path/to/your/webspace/public_html/zen/cache -- leave no trailing slash define('SQL_CACHE_METHOD', 'database'); define('DIR_FS_SQL_CACHE', '/homepages/5/d232125156/htdocs/michellegibson.net/store/cache'); // Define the webserver and path parameters // Main webserver: eg-http://www.your_domain.com - // HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com // HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com // HTTP_CATALOG_SERVER is your Main webserver: eg-http://www.your_domain.com // HTTPS_CATALOG_SERVER is your Secure webserver: eg-https://www.your_domain.com /* * URLs for your site will be built via: * HTTP_SERVER plus DIR_WS_ADMIN or * HTTPS_SERVER plus DIR_WS_HTTPS_ADMIN or * HTTP_SERVER plus DIR_WS_CATALOG or * HTTPS_SERVER plus DIR_WS_HTTPS_CATALOG * ...depending on your system configuration settings */ // EOF

It wasn't # 3, as I sent my check for $100, but I still don't have an answer. I checked into SSL, but my server is only allowed one, and I have several stores running on it. I finally installed 1.3.9 instead, which works fine, but I'm going to be in trouble when I have to upgrade.

My server (1and1) is dropping PHP < 5.4, and 1.3.8a apparently (from what I've read) won't run on 5.4. I haven't been able to install 1.5 due to the shared SSL issue (see post #1). I hate to sound impatient, but time is now a crucial factor, as I have to resolve this or find another online store.

Am I correct in assuming 1.3.8a will not run on PHP 5.4?

How crucial is SSL for the store?

Do releases 1.5 and up still split the credit card info and allow us to enter them manually?

Will there ever be a resolution to this problem I have reported?

If I upset anyone, I sincerely apologize.

rayw1679:

My server (1and1) is dropping PHP < 5.4, and 1.3.8a apparently (from what I've read) won't run on 5.4.Correct. v1.3.8 was written before PHP 5.4 was even conceived, and is not compatible with it.

rayw1679:

I haven't been able to install 1.5 due to the shared SSL issue (see post #1).It really looks like a simple configuration error.

rayw1679:

How crucial is SSL for the store?If you're accepting credit cards directly on your site, then SSL is more than critical.
Dedicated SSL is even better. But you've already discussed that, so I'm not going to pressure you to go there; I'll simply remind you that customers "accept" it better when the URL matches the name of the store's domain they're visiting.
And as you mentioned earlier, yes Zen Cart usually works fine in a shared-SSL environment provided your configure.php files contain the correct information.

rayw1679:

Do releases 1.5 and up still split the credit card info and allow us to enter them manually?Not as a built-in feature, no. That's a huge PCI no-no. However, there is an addon available which adds some encryption around that process, making it a possibly viable choice, which many have chosen to use happily.

rayw1679:

Will there ever be a resolution to this problem I have reported?Should be already. Sorry that your post fell through the cracks.
That said, there ARE some hosting environments where Shared SSL does NOT work with Zen Cart, simply because of how the hosting company has architected their server farm and how their shared certificates are configured. This is a hosting limitation, and not a Zen Cart limitation. It's unclear yet whether you're a victim of an incompatible host in that regard.

rayw1679:

If I upset anyone, I sincerely apologize.No need to apologize. I don't see where you've upset anyone.

rayw1679:

New installation of 1.5 -- after I try to sign-in, I get a "page not found" because the URL has the domain name in it twice. I have tried removing it, but then I get no domain name at all. Thanks for your help.

admin/includes/configure.php:
define('HTTP_SERVER', 'https://ssl.perfora.net/rdswebs.net');
define('HTTPS_SERVER', 'https://ssl.perfora.net/rdswebs.net/michellegibson.net');
define('HTTP_CATALOG_SERVER', 'http://michellegibson.net');
define('HTTPS_CATALOG_SERVER', 'https://ssl.perfora.net/rdswebs.net/michellegibson.net');

URL requested after login:
https://ssl.perfora.net/rdswebs.net/michellegibson.net/ ...
michellegibson.net/store/adminXXX/index.php

I'm not clear whether this is intentionally isolated to discussion about your Admin only, or if the problem supposedly affects your storefront as well.

I know you posted some admin configure.php contents earlier, for your 1.5 test site. But can I ask you to post BOTH of your configure.php files for you v1.3.8 site, since you say they're working without problem right now in your shared SSL environment. This would be critical information in order to help you. Of course please blank out the database username/pwd when posting.

Also blank out your admin foldername, as that will be visible in plaintext for a v1.3.8 site, and you don't want to be publishing it for hackers to see.

er, um, ya, but don't get too aggressive in blanking it out. Changing it to "adminXX" like you did in an earlier post is fine.
Some people obfuscate a whole lot more than that, and it makes it VERY difficult to give a SPECIFIC workable answer. Just sayin...

Perhaps the "advanced information" at the bottom of this FAQ article may help add some clarity to what's needed for you: http://www.zen-cart.com/content.php?56-how-do-i-enable-ssl-after-i-have-installed-zen-cart
Granted, there might be a few small challenges with the autodetection in v1.5.x under shared SSL, hence my request for your current configure.php settings. Namely I'm looking for the HTTP_SERVER, HTTPS_SERVER, DIR_WS_CATALOG, DIR_WS_ADMIN, DIR_WS_HTTPS_CATALOG, DIR_WS_HTTPS_ADMIN, since those drive all of it, and DIR_FS_ADMIN and DIR_FS_CATALOG values for sanity/reference check.

Is there a link where I may read about the credit card issue? I. E., is it now automatic processing? Because some of our parts are difficult to get, we often split the orders, charging each one as it goes out. Our Zen-Cart site passed PCI testing in 1.3.9. Handling of credit cards is a major issue.

As for shared-SSL, it's the same one we're using now on 1.3.8 and 1.3.9. Apparently, there's a limit to IP addresses, and we can only get one IP address, so we can only get one SSL, and we run several online stores. We could run them under a dedicated SSL, but still couldn't get multiples. I have no problem with an SSL, just the limit of one. Should I do that for rdswebs.net (server name)?

The failure was on the store side also, if I remember -- it has been 8 or 9 months, and I don't recall.

Config from 1.3.9 that is currently running:

<?php /** * * @package Configuration Settings * @copyright Copyright 2003-2006 Zen Cart Development Team * @copyright Portions Copyright 2003 osCommerce * @license <http://www.zen-cart.com/license/2_0.txt> GNU Public License V2.0 */ /*************** NOTE: This file is similar, but DIFFERENT from the "admin" version of configure.php. ***********/ /*************** The 2 files should be kept separate and not used to overwrite each other. ***********/ // Define the webserver and path parameters // HTTP_SERVER is your Main webserver: eg, <http://www.yourdomain.com> // HTTPS_SERVER is your Secure webserver: eg, <https://www.yourdomain.com> define('HTTP_SERVER', 'http://rdswebs.net'); define('HTTPS_SERVER', 'https://ssl.perfora.net/rdswebs.net'); // Use secure webserver for checkout procedure? define('ENABLE_SSL', 'true'); // NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes! // * DIR_WS_* = Webserver directories (virtual/URL) // these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder) define('DIR_WS_CATALOG', '/michellegibson.net/store/'); define('DIR_WS_HTTPS_CATALOG', '/michellegibson.net/store/'); define('DIR_WS_IMAGES', 'images/'); define('DIR_WS_INCLUDES', 'includes/'); define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/'); define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/'); define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/'); define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/'); define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/'); define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/'); define('DIR_WS_PHPBB', '/'); // * DIR_FS_* = Filesystem directories (local/physical) //the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/ define('DIR_FS_CATALOG', '/kunden/homepages/5/d232125156/htdocs/michellegibson.net/store/'); define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/'); define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/'); define('DIR_WS_UPLOADS', DIR_WS_IMAGES . 'uploads/'); define('DIR_FS_UPLOADS', DIR_FS_CATALOG . DIR_WS_UPLOADS); define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/'); // define our database connection define('DB_TYPE', 'mysql'); define('DB_PREFIX', ''); define('DB_SERVER', 'localhost:/tmp/mysql5.sock'); define('DB_SERVER_USERNAME', 'xxx'); define('DB_SERVER_PASSWORD', 'xxx'); define('DB_DATABASE', 'xxx'); define('USE_PCONNECT', 'false'); // use persistent connections? define('STORE_SESSIONS', 'db'); // use 'db' for best support, or '' for file-based storage // The next 2 "defines" are for SQL cache support. // For SQL_CACHE_METHOD, you can select from: none, database, or file // If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache // or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder // ie: /path/to/your/webspace/public_html/zen/cache -- leave no trailing slash define('SQL_CACHE_METHOD', 'database'); define('DIR_FS_SQL_CACHE', '/kunden/homepages/5/d232125156/htdocs/michellegibson.net/store/cache'); ?>

ADMIN Config:

<?php // /** * * @package Configuration Settings * @copyright Copyright 2003-2006 Zen Cart Development Team * @copyright Portions Copyright 2003 osCommerce * @license <http://www.zen-cart.com/license/2_0.txt> GNU Public License V2.0 */ /*************** NOTE: This file is similar, but DIFFERENT from the "store" version of configure.php. ***********/ /*************** The 2 files should be kept separate and not used to overwrite each other. ***********/ // Define the webserver and path parameters // Main webserver: eg, <http://localhost> - should not be empty for productive servers // HTTP_SERVER is your Main webserver: eg, <http://www.yourdomain.com> // HTTPS_SERVER is your Secure webserver: eg, <https://www.yourdomain.com> // HTTP_CATALOG_SERVER is your Main webserver: eg, <http://www.yourdomain.com> // HTTPS_CATALOG_SERVER is your Secure webserver: eg, <https://www.yourdomain.com> /* * URLs for your site will be built via: * HTTP_SERVER plus DIR_WS_ADMIN or * HTTPS_SERVER plus DIR_WS_HTTPS_ADMIN or * HTTP_SERVER plus DIR_WS_CATALOG or * HTTPS_SERVER plus DIR_WS_HTTPS_CATALOG * ...depending on your system configuration settings */ define('HTTP_SERVER', 'http://rdswebs.net'); define('HTTPS_SERVER', 'https://ssl.perfora.net/rdswebs.net'); define('HTTP_CATALOG_SERVER', 'http://rdswebs.net'); define('HTTPS_CATALOG_SERVER', 'https://ssl.perfora.net/rdswebs.net'); // Use secure webserver for catalog module and/or admin areas? define('ENABLE_SSL_CATALOG', 'true'); define('ENABLE_SSL_ADMIN', 'true'); // NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes! // * DIR_WS_* = Webserver directories (virtual/URL) // these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder) define('DIR_WS_ADMIN', '/michellegibson.net/store/admin/'); define('DIR_WS_CATALOG', '/michellegibson.net/store/'); define('DIR_WS_HTTPS_ADMIN', '/michellegibson.net/store/admin/'); define('DIR_WS_HTTPS_CATALOG', '/michellegibson.net/store/'); define('DIR_WS_IMAGES', 'images/'); define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/'); define('DIR_WS_CATALOG_IMAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'images/'); define('DIR_WS_CATALOG_TEMPLATE', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/templates/'); define('DIR_WS_INCLUDES', 'includes/'); define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/'); define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/'); define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/'); define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/'); define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/'); define('DIR_WS_CATALOG_LANGUAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/languages/'); // * DIR_FS_* = Filesystem directories (local/physical) //the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/ define('DIR_FS_ADMIN', '/kunden/homepages/5/d232125156/htdocs/michellegibson.net/store/admin/'); define('DIR_FS_CATALOG', '/kunden/homepages/5/d232125156/htdocs/michellegibson.net/store/'); define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/'); define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/'); define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/'); define('DIR_FS_CATALOG_TEMPLATES', DIR_FS_CATALOG . 'includes/templates/'); define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/'); define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/'); define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/'); // define our database connection define('DB_TYPE', 'mysql'); define('DB_PREFIX', ''); define('DB_SERVER', 'localhost:/tmp/mysql5.sock'); define('DB_SERVER_USERNAME', 'xxx'); define('DB_SERVER_PASSWORD', 'xxx'); define('DB_DATABASE', 'xxx'); define('USE_PCONNECT', 'false'); // use persistent connections? define('STORE_SESSIONS', 'db'); // use 'db' for best support, or '' for file-based storage // The next 2 "defines" are for SQL cache support. // For SQL_CACHE_METHOD, you can select from: none, database, or file // If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache // or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder // ie: /path/to/your/webspace/public_html/zen/cache -- leave no trailing slash define('SQL_CACHE_METHOD', 'database'); define('DIR_FS_SQL_CACHE', '/kunden/homepages/5/d232125156/htdocs/michellegibson.net/store/cache'); ?>

Your assistance is most appreciated.

I'm on 1and1, too, and successfully setup a zen cart using their shared SSL. I'm assuming that the domain you've registered with them is the rdswebs.net and that you've got its "Destination" set via your 1and1 Control Panel to be the root of your hosted file structure and a michellegibson.net/store directory off that.

I'm also assuming that you've modified the name of your database server for purposes of posting instead of specifying the actual database name. Other than that, your configure.php setups look like they should work.

Do you have any .htaccess files in the root?

rayw1679:

Is there a link where I may read about the credit card issue? I. E., is it now automatic processing? Because some of our parts are difficult to get, we often split the orders, charging each one as it goes out. Our Zen-Cart site passed PCI testing in 1.3.9. Handling of credit cards is a major issue.
I 'get' that you want to process cards manually, and for good reason. You can still do that. But you need to add a specific module to do that sort of manual processing. The Ceon Manual Card payment module (see the plugins library) lets you do that.
The feature was removed from Zen Cart as of v1.5.0 because sending (even partial) card numbers by email and storing (even part of) them unencrypted in the database are both PCI no-no's. The Ceon module has similar functionality as the old formerly-built-in module, but adds encryption.

lat9:

I'm on 1and1, too, and successfully setup a zen cart using their shared SSL. I'm assuming that the domain you've registered with them is the rdswebs.net and that you've got its "Destination" set via your 1and1 Control Panel to be the root of your hosted file structure and a michellegibson.net/store directory off that.

I'm also assuming that you've modified the name of your database server for purposes of posting instead of specifying the actual database name. Other than that, your configure.php setups look like they should work.

Do you have any .htaccess files in the root?
@lat9, this discussion started as a problem with using this shared-SSL arrangement for a v1.5 upgrade, and apparently something amuck with how the v1.5 auto-detection of the admin folder location works when there are this many multiple subdirectory levels involved.

The configuration quoted will indeed work fine on v1.3.9.
And could even be re-used as hard-coded in v1.5.0 as-is ... with the caveat that he'll have to rename his admin folder references by hand instead of letting the system autodetect things properly for him if he simply renames the folder via FTP without having to do any file edits for it.

rayw1679:

define('HTTP_SERVER', 'http://rdswebs.net');
define('HTTPS_SERVER', 'https://ssl.perfora.net/rdswebs.net');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/michellegibson.net/store/');
define('DIR_WS_HTTPS_CATALOG', '/michellegibson.net/store/');

ADMIN Config:

define('HTTP_SERVER', 'http://rdswebs.net');
define('HTTPS_SERVER', 'https://ssl.perfora.net/rdswebs.net');
define('HTTP_CATALOG_SERVER', 'http://rdswebs.net');
define('HTTPS_CATALOG_SERVER', 'https://ssl.perfora.net/rdswebs.net');

// Use secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_ADMIN', '/michellegibson.net/store/admin/');
define('DIR_WS_CATALOG', '/michellegibson.net/store/');
define('DIR_WS_HTTPS_ADMIN', '/michellegibson.net/store/admin/');
define('DIR_WS_HTTPS_CATALOG', '/michellegibson.net/store/');

The "autodetect foldername" logic in the v1.5.x admin configure.php splits the domain off from the other subfolders mentioned in the HTTPS_SERVER and HTTP_SERVER settings.
Unfortunately that won't work for your hosting company's ssl-proxy configuration.

So, you have two options:

a) use the same DIR_WS_ADMIN and DIR_WS_HTTPS_ADMIN lines from your v1.3.9 admin configure.php file instead of the stuff in the auto-generated v1.5.x file. And you'll need to manually change the "/admin/" foldername to match whatever you rename your real admin folder to ... since v1.5.x won't let you use "admin" as the actual foldername, for basic security-by-obscurity reasons.

b) or perhaps we can work on changing the autodetection logic.

lat9 - Yes, there is a sizeable .htaccess file in the root. 1and1 provided it, and it has been there quite some time. I'll gladly answer anything about it, but 1.3.8 and 1.3.9 have worked fine with the shared SSL and the .htaccess file. rdswebs.net is the name of my server ... the perfora file is the SSL. I have always fought the config files ... the instructions were not very intuitive to me.

My speciality was MVS, but that was years ago and I'm still trying to learn about having a server and online stores. I'm on prescription painkillers, which doesn't help.

DrByte -- I'll dissect everything you said this weekend, but it sounds as if we can install 1.5 or whatever, copy the config files from 1.3.8, install the credit card module, and be in good shape. I'm just cautious about excessive downtime while I'm doing all that. I guess I could copy the store to another name with another database and try to reload it -- I always seem to get strange characters imbeded when I do that.

You have no idea how much I appreciate all the help.

lat9 - Yes, there is a sizeable .htaccess file in the root. 1and1 provided it, and it has been there quite some time. I'll gladly answer anything about it, but 1.3.8 and 1.3.9 have worked fine with the shared SSL and the .htaccess file. rdswebs.net is the name of my server ... the perfora file is the SSL. I have always fought the config files ... the instructions were not very intuitive to me.

My speciality was MVS, but that was years ago and I'm still trying to learn about having a server and online stores. I'm on prescription painkillers, which doesn't help.

DrByte -- I'll dissect everything you said this weekend, but it sounds as if we can install 1.5 or whatever, copy the config files from 1.3.8, install the credit card module, and be in good shape. I'm just cautious about excessive downtime while I'm doing all that. I guess I could copy the store to another name with another database and try to reload it -- I always seem to get strange characters imbeded when I do that.

You have no idea how much I appreciate all the help.