Forums / Installing on a Linux/Unix Server / Shopping Cart Page not in SSL

Shopping Cart Page not in SSL

Views: 1,365

Results 1 to 7 of 7
14 Nov 2014, 11:36 PM
#1
barf avatar

barf

New Zenner

Join Date:
Jan 2012
Posts:
24
Plugin Contributions:
0

Shopping Cart Page not in SSL

Using the latest version of ZC with Hostgator hosting I had them install their positive SSL on my site. Everything is working as should compared to my friends Zencart site with SSL on Hostgator execpt on mine when I click on the Shopping cart page link even when I'm logged in it takes me out of SSL.

Anyone have an idea what I should check or change? Or why it might be doing this.

Even when I click the link for shopping cart and leave the SSL area, I can click something like the checkout link or my account link and it goes right back to SSL.

Any help or suggestions would be appreciated!

Thanks in advance!

14 Nov 2014, 11:54 PM
#2
mc12345678 avatar

mc12345678

Totally Zenned

Join Date:
Jul 2012
Posts:
16,908
Plugin Contributions:
2

Re: Shopping Cart Page not in SSL

To be clear, pages such as the account and login pages are intended to use SSL if/when enabled to encrypt the data there. The shopping cart page does not have the same need for encryption. That said, is every page other than the shopping cart page served with SSL (https:)?

ZC Installation/Maintenance Support <- Site
Contribution for contributions welcome...

14 Nov 2014, 11:59 PM
#3
barf avatar

barf

New Zenner

Join Date:
Jan 2012
Posts:
24
Plugin Contributions:
0

Re: Shopping Cart Page not in SSL

Yes all other pages are SSL as they should be. I was referencing my friends site and his shopping cart page is in SSL. I would think (First Problem right?) that being logged into my account it would show SSL on the shopping cart page.

15 Nov 2014, 12:01 AM
#4
barf avatar

barf

New Zenner

Join Date:
Jan 2012
Posts:
24
Plugin Contributions:
0

Re: Shopping Cart Page not in SSL

The store front and product pages aren't SSL but the others like Check out and My account are. It evens goes SSL when I click on Login.

15 Nov 2014, 12:09 AM
#5
mc12345678 avatar

mc12345678

Totally Zenned

Join Date:
Jul 2012
Posts:
16,908
Plugin Contributions:
2

Re: Shopping Cart Page not in SSL

Barf:

The store front and product pages aren't SSL but the others like Check out and My account are. It evens goes SSL when I click on Login.

So again the pages identified as having SSL are absolutely the ones that should. If you for some reason want all of your pages everywhere to be shown with https, then you would need to modify your includes/configure.php file to have both web addresses include https. While a "popular" search engine has gone to suggesting that all pages everywhere should be hosted using SSL, historical discussion has been that this process slows down interaction unnecessarily. What is to be gained by encrypting the description of a product or the home page where no information is transferred between the host and the customer that would result in a loss of security information?

ZC Installation/Maintenance Support <- Site
Contribution for contributions welcome...

15 Nov 2014, 1:09 AM
#6
barf avatar

barf

New Zenner

Join Date:
Jan 2012
Posts:
24
Plugin Contributions:
0

Re: Shopping Cart Page not in SSL

Ok. Thanks for the assistance. Needed to make sure something wasn't set wrong. First SSL I (almost) set up myself. Again Thanks!

17 Nov 2014, 2:43 PM
#7
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,515
Plugin Contributions:
176

Re: Shopping Cart Page not in SSL

Barf:

when I click on the Shopping cart page link even when I'm logged in it takes me out of SSL.

Anyone have an idea what I should check or change? Or why it might be doing this.

Even when I click the link for shopping cart and leave the SSL area, I can click something like the checkout link or my account link and it goes right back to SSL.
That's by design. You've done nothing wrong.

Only once have I seen a case where it was particularly important to have the shopping cart page in SSL ... because the items for sale were legal contracts and they allowed for customization via attributes, and it was desired to keep that information confidential. It required a few changes to PHP code to make it happen.
But for the most part it's not necessary.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.