SSL Not Working Correctly

Hi all,

I am hoping some kind person can help me with the SSL problems I face on my site!

Site is papercraftkits.com

The SSL certificate has been installed by my host but for some reason my site is only giving me a partial encryption, I know the SSL is working as my admin gives me the green padlock. I have checked my config files which are below

This is my includes/configure file

// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg-http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg-https://www.yourdomain.com
define('HTTP_SERVER', 'http://papercraftkits.com');
define('HTTPS_SERVER', 'https://papercraftkits.com');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!

// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', '/');

and this is my admin/includes/configure

• URL's for your site will be built via:

• HTTP_SERVER plus DIR_WS_ADMIN or
  

• HTTPS_SERVER plus DIR_WS_HTTPS_ADMIN or
  

• HTTP_SERVER plus DIR_WS_CATALOG or
  

• HTTPS_SERVER plus DIR_WS_HTTPS_CATALOG
  

• ...depending on your system configuration settings
• If you desire your entire admin to be SSL-protected, make sure you use a "https:" URL for all 4 of the following:
  */
  define('HTTP_SERVER', 'http://papercraftkits.com');
  define('HTTPS_SERVER', 'https://papercraftkits.com');
  define('HTTP_CATALOG_SERVER', 'http://papercraftkits.com');
  define('HTTPS_CATALOG_SERVER', 'https://papercraftkits.com');

// secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');

Checkout, Login or any of the pages secure!

Can someone please take a look and point me in the right direction - I am prepared to pay for some help.

Thanks in advance
Debbie

https://www.zen-cart.com/tutorials/index.php?article=150

Thanks DrByte, very useful document however i am guessing it is because of the template I am using and I have no idea where to begin :no:

I am prepared to pay if someone could please help me?

Things look fine to me...

Zencart will only put the site into SSL (https) when SSL is needed.

SSL is needed ONLY when sensitive information needs to be transmitted (login, register, checkout).

At all other times, SSL is "dormant".

SSL can slow a site down, and as it is only needed when data is being TRANSMITTED over the internet, it can be switched off when not needed... ensuring that your site is not unnecessarily slowed down.

Thanks Schoolboy!

I sat last night and went through all the files used for my template and changed all HTTP to HTTPS and then it seemed to work.

"SSL is needed ONLY when sensitive information needs to be transmitted (login, register, checkout).

At all other times, SSL is "dormant".

SSL can slow a site down, and as it is only needed when data is being TRANSMITTED over the internet, it can be switched off when not needed... ensuring that your site is not unnecessarily slowed down."

I see the green https on all my pages does this mean I am slowing the site down? Or is that correct?

Thanks
Debbie

If SSL is configured on your server properly (talk to your host) and zencart is operating normally, then SSL will work ONLY when it is necessary.

For you to go into code files and hack them to FORCE unnecessary behaviour is not very wise. Unless you are knowledgeable and experienced in the FUNCTIONS implied by certain HTTP calls, you could actually being doing damage to zencart's operations.

If the template itself is badly designed (and many are), then that is a different issue, and you need to address your concerns with the person/company that built/sold the template.

When I went to your site, SSL appeared to be working as it is supposed to, so your tinkering is likely to have been in vain. I would (if I were you) restore everything to what it was before you attacked the code. Just restore the backup copies you made of each file before you did the edits... You do have backups... ?

Unfortunately I know very little about Zen Cart and with having recently installed a new template I was stuck!!

If the SSL appears to be working correctly then my messing was purely luck but it wasn't until I edited these files could I get the SSL to work correctly at all so seems a bad template!

I have backups of the files but fingers crossed I wont need them :smile:

Thank you very much for your help.
Debbie

The way to test for possible template issues is to REVERT to the CLASSIC TEMPLATE, and see if the site behaves the same way as it does uning a CUSTOM template.

(This is why "classic" should NEVER be altered or modified).

If your site behaves normally when using CLASSIC, then you can be pretty sure your problems are being caused by any customised template files.

If your site behaves THE SAME when using CLASSIC, then you probably have issues NOT related to custom templating.

And further... you should not use a faulty template... If the template is producing errors in this area, it's likely there are others that may not be so obvious.