Upgrade from 1.51 to 1.54, Admin Works OK but store does NOT

Shopping cart upgraded from 1.51 to 1.54, today dedicated SSL bought and installed. Set Enable SSL to be "true" for the two configure.php. Tested https://xxxx.com and it worked.

Then an attempt to check out is performed and it turned out that Admin Works OK but store does NOT work for checkout.

The symptom is:
Login to Admin Ok via Firefox with URL bar status showing https://xxxx.com/admin/index.php
For storefront, click My Account and able to login only with http://xxxx.com/index.php?main_page=login rather than https://xxxx.com/index.php?main_page=login. For previous version 1.51, whenever click My Account, the URL stats will automatically tun to "https://xxxx.com/..."

Then try to check out without https://xxxx.com/......, PayPal payment module fails to show up though PayPal is configured well and turned on.

The even odd thing is from Admin>Who's Online, the URL during checkout is always like /ajax.php?act=ajaxPayment&method=setNoscriptCookie

Any suggestion?

Just a quick update that i found a ajax.php file added to root directory by itself. Also there is a a text file (XXXXXXXXXXXXXXXXXXXXXX7005569602A81
comodoca.com) added to root directory.

The problem is still there which is "Unable to switch to the HTTPS URL during Checkout " while Admin login page is OK (redirect to https://...).

I searched the forum about failure of SSL. Most of the reasons is from includes/configure.php. I triple checked it is alright.

Any suggestions?

So can't help much without the "hidden" URL, but 1) try using the default ZC template, 2) what actually happens when trying to login with https? What is meant by worked one way in 1.5.1 if the certificate was just purchased?

For storefront, click My Account and able to login only with http
Post the contents of your includes/configure.php file - obscuring any sensitive information
Wrap in code tags available in the tool bar as #

A link to your site would be helpful also
you can post it like
www.zen-cart dot com

<?php /** * @package Configuration Settings circa 1.5.0 * @copyright Copyright 2003-2011 Zen Cart Development Team * @copyright Portions Copyright 2003 osCommerce * @license <http://www.zen-cart.com/license/2_0.txt> GNU Public License V2.0 * File Built by zc_install on 2012-03-05 01:38:44 */ /*************** NOTE: This file is similar, but DIFFERENT from the "admin" version of configure.php. ***********/ /*************** The 2 files should be kept separate and not used to overwrite each other. ***********/ // Define the webserver and path parameters // HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com // HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com define('HTTP_SERVER', 'http://xxxxx.com'); define('HTTPS_SERVER', 'https://xxxxx.com'); // Use secure webserver for checkout procedure? define('ENABLE_SSL', ‘true’); // NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes! // * DIR_WS_* = Webserver directories (virtual/URL) // these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder) define('DIR_WS_CATALOG', '/'); define('DIR_WS_HTTPS_CATALOG', '/'); define('DIR_WS_IMAGES', 'images/'); define('DIR_WS_INCLUDES', 'includes/'); define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/'); define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/'); define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/'); define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/'); define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/'); define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/'); define('DIR_WS_PHPBB', '/'); // * DIR_FS_* = Filesystem directories (local/physical) //the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/ define('DIR_FS_CATALOG', '/home/xxxxxx/public_html/'); define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/'); define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/'); define('DIR_WS_UPLOADS', DIR_WS_IMAGES . 'uploads/'); define('DIR_FS_UPLOADS', DIR_FS_CATALOG . DIR_WS_UPLOADS); define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/'); // define our database connection define('DB_TYPE', 'mysql'); define('DB_PREFIX', 'zen_'); define('DB_CHARSET', 'latin1'); define('DB_SERVER', 'localhost'); define('DB_SERVER_USERNAME', 'xxxxxxxx'); define('DB_SERVER_PASSWORD', 'xxxxxxxx'); define('DB_DATABASE', 'xxxxxxx'); // The next 2 "defines" are for SQL cache support. // For SQL_CACHE_METHOD, you can select from: none, database, or file // If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache // or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder // ie: /path/to/your/webspace/public_html/zen/cache -- leave no trailing slash define('SQL_CACHE_METHOD', 'none'); define('DIR_FS_SQL_CACHE', '/home/signag5/public_html/cache'); // EOF

What is your site url??

Did you post the contents from a local copy or a fresh download from your server?

Also, noticed some obscuring happening:

define('DIR_FS_CATALOG', '/home/xxxxxx/public_html/');

But not:

define('DIR_FS_SQL_CACHE', '/home/signag5/public_html/cache');

Since the first was obscured (possibly with a find and replace) shouldn't the second have as well thus indicating a discrepancy in content?

my site signagen.com

the configure.php was first downloaded from server to my desktop followed by opening with notepad. Then copy and paste.

To mc12345678:

I just forgot to mask "signag5" to "xxxxxx" from define('DIR_FS_SQL_CACHE', '/home/signag5/public_html/cache');

actually they are same with /home/signag5/public_html

To mc12345678:

I tried to login with https. after login, it switch back to http. if i forced all https via .htaccess, then i have no way to login.

using default template "Classic Contemporary Green" is just the same.

Tested SSL via Qualys SSL Labs. It rated B and just fine

This is what you should try to do:

1. Disable the URL Friendly.
2. Backup your .htaccess on your computer and remove it from your server.
3. Try to test it.

Chu

thank you.

What I do:

1. Disable URI Mapping
2. Backup .htaccess and remove .htaccess

The result is same, no luck. admin login redirected to https while site login did NOT.

BTW how about the ajax.php and /ajax.php?act=ajaxPayment&method=setNoscriptCookie? Are they normal for 1.54?

SignaGen2:

BTW how about the ajax.php and /ajax.php?act=ajaxPayment&method=setNoscriptCookie? Are they normal for 1.54?

Yes, ajax.php has been added since 1.5.4, the file resides in the root directory of your site (where your index.php lives). The other link is autogenerated by ajax.php

SignaGen2:

thank you.

What I do:

1. Disable URI Mapping
2. Backup .htaccess and remove .htaccess

The result is same, no luck. admin login redirected to https while site login did NOT.

BTW how about the ajax.php and /ajax.php?act=ajaxPayment&method=setNoscriptCookie? Are they normal for 1.54?

I have tried to create an account on your site and login. It works fine for me. Please try to create a new account then login with yourself.

I understand creation of new account works OK. But the thing is it does NOT switch to https during checkout and therefore the PayPal won't show up during checkout. The result is customer has no way to check out online. Now I had to turn on CC Offline temporarily to just collect customer's CC info so that customer can "check out". but that is NOT a good solution 'cause without https customer's experience is bad. We really need a solution!!!

Any ideas?

Just a quick update that both the configure.php's permission was automatically changed to 440. It is wired. Then I changed them back to 444. The site is still NOT working. When I click create account, it fails to redirect to https. Any ideas?

Go to /includes/init_includes/init_file_db_names.php and backup this file and restore your old file (I think you have backup before upgrade) then try to re-test.

Did exactly what you suggested by backing up /includes/init_includes/init_file_db_names.php in 1.54 and upload /includes/init_includes/init_file_db_names.php from 1.51 version. Re-did test and it was same no redirection to https during checkout as it should be. I am frustrated... :frusty::frusty:

May be I will have to redo installation. Any further suggestion?

one thing i think i forgot to mention is that I changed host during migration of my site. My site (1.51) used to be working properly with Hostgator. Due to slow page loading and bad support, I recently moved to Inmotion and did an upgrade from 1.51 to 1.54. Then I tested the new site completely and found nothing wrong. Then I pointed my domain to Inmotion and purchased a dedicated SSL cert which was installed yesterday. After I tested https://signagen.com working, I turned SSL on via two configure.php files. Then the problem appeared: Admin works OK while my site fails to redirect to https mode all the time until now. Hopefully the whole story help you understand my situation better.