SSL problem with browsers (chrome and firefox but not internet explorer 11)

Hi,

I got this warning from firefox:

"Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.".

I think the warning is related to the forms used within the Cart. Specifically, I have problem with the all products, new products and featured products pages that have search boxes.

I think I may have to change some settings from SSL/NONSSL to $request_type according to what I have found here. But, I could not find the files that contain these settings. Would you please point me in the direction so that I can eliminate this warning?

Thanks,

Take a look at the basics and it may get you in the right spot. http://www.zen-cart.com/content.php?56-how-do-i-enable-ssl-after-i-have-installed-zen-cart
I would hazard a guess that you have the http and http server set to the same in your includes/configure.php.

dbltoe:

Take a look at the basics and it may get you in the right spot. http://www.zen-cart.com/content.php?56-how-do-i-enable-ssl-after-i-have-installed-zen-cart
I would hazard a guess that you have the http and http server set to the same in your includes/configure.php.
Hi,

Would you please provide a bit more detail regarding "http and http server set to the same"?

Thanks

What's your URL?

I suspect you've got hard-coded references to images or css files as http://whatever and therefore you're forcing certain parts to be loaded without ssl. Sharing your URL will let us inspect and help.

DrByte:

What's your URL?

I suspect you've got hard-coded references to images or css files as http://whatever and therefore you're forcing certain parts to be loaded without ssl. Sharing your URL will let us inspect and help.

Hi,
Thanks for your help, my url is : https://www. 13cr eativ ethings.com

Unrelated, but I do see something else you might want to fix. Go to your shopping-cart page, and you'll see the following text on-screen: "You may want to add some instructions for using the shopping cart here. (defined in includes/languages/english/shopping_cart.php)"
You can change that text by editing the file mentioned there.

In your /includes/configure.php file, what are your settings for HTTP_SERVER and HTTPS_SERVER ?

The reason I ask is that your site seems to be using https on all pages, but with https://www.13 and yet I think your configuration settings are pointing to http://13 ... and you should either always use "www." or never use it. And maybe you've got .htaccess rewrite rules set up to force the www and https, but you've not configured ZC to use those, and thus you're throwing errors.

DrByte:

Unrelated, but I do see something else you might want to fix. Go to your shopping-cart page, and you'll see the following text on-screen: "You may want to add some instructions for using the shopping cart here. (defined in includes/languages/english/shopping_cart.php)"
You can change that text by editing the file mentioned there.

Thanks, it was on my to-do list.

DrByte:

In your /includes/configure.php file, what are your settings for HTTP_SERVER and HTTPS_SERVER ?

The reason I ask is that your site seems to be using https on all pages, but with https://www.13 and yet I think your configuration settings are pointing to http://13 ... and you should either always use "www." or never use it. And maybe you've got .htaccess rewrite rules set up to force the www and https, but you've not configured ZC to use those, and thus you're throwing errors.

YES, you are genius! Thank you very much. I pointed both HTTP_SERVER and HTTPS_SERVER to the same HTTPS server. As a result, the problem seems to be solved.

I don't presume to speak for the Doc but, I think he was referring to using www or not using www in the settings. Having both the http and https set to https in the configure.php is not needed nor recommended. Zen Cart will go into secure mode when needed and, adding https to the entire store tends to create link problems as you noted in your original post.

dbltoe:

I don't presume to speak for the Doc but, I think he was referring to using www or not using www in the settings. Having both the http and https set to https in the configure.php is not needed nor recommended. Zen Cart will go into secure mode when needed and, adding https to the entire store tends to create link problems as you noted in your original post.

yes and no.

If he wants to run his entire site in SSL because he believes he needs that much security, he's welcome to do so.

If that wasn't intentional, then I suspect his hosting company or whoever set up SSL for him doesn't know how to do it correctly and simply forced everything to be SSL using url-rewrites, and the better solution would have been to remove that rewrite and then simply be sure to use www. for both the http and https settings in configure.php