Ssl Problem With Credit Cards

I made a test buy and SSL is not working when I put in the credit card numbers even though SSL has been configured. :wacko: :( When I log in to the admin, it is working fine. Can somebody please tell me how to fix the problem?

Thanks.

Virtue

got a URL to look at?
Who is your host?

have you manually added any images?
do you run a tracking code like from google?

The site is not done yet. I am still trying to make some changes with the layout. But I am not worried about that yet. I am more concerned with the security as of the moment.

Here's the url
http://exophora.com/e-store/index.php?main_page=index

I am wondering why I am not seeing the https:// when I tried to make a test buy. My host is advancehostnetwork. They already configured it for me. The tech support mentioned about setting a cookie to make this to work? I am new to this ssl thing, so I really don't know what to say.

If you can do something please help.

Thanks.

Virtue

it would seem that the includes/configuration.php
is not configured properly,

It needs to define the shared ssl URL and the ssl switch needs to be set to true....

The reason I asked about images or tracking software is if not done properly these can actually break SSL
and the reason I asked about host is certain hosts ( godaddy and others ) require a change in the core code to work

Hi Merlin,

Okay I am copying the lines wherein we changed the configuration. Can you please tell me what is wrong?

Please see below codes. Thanks:

define('HTTP_SERVER', 'http://exophora.com');
define('HTTPS_SERVER', 'https://ssl127.securednshost.com/~exophora');
define('HTTP_CATALOG_SERVER', 'http://exophora.com');
define('HTTPS_CATALOG_SERVER', 'https://ssl127.securednshost.com/~exophora');

// Use secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_ADMIN', '/e-store/admin/');
define('DIR_WS_CATALOG', '/e-store/');
define('DIR_WS_HTTPS_ADMIN', '/e-store/admin/');
define('DIR_WS_HTTPS_CATALOG', '/e-store/');

Something is not configured correctly as your site is not changing to SSL when it should.

Perhaps this FAQ will help. http://www.zen-cart.com/forum/faq.php?faq=catalog_config#faq_configure_ssl_

that is only the admin configuration file

you missed the
includes/configure.php

We followed exactly what it said.

I didn't see instructions for a shared SSL.

I am thinking of adding this code, am guessing:

define('HTTPS_SERVER', 'https://ssl127.securednshost.com/~exophora/e-store');

Dont add anything
please follow the instructions in your PM

you only modified 1 of the 2 config files,
the one you posted is from the admin

just make the changs to the catalog side and you will be all set

Here's the other modification we made from includes/configure.php. Am I missing something? Or is there something wrong? I made a test buy using a dummy card number through linkpoint it went through perfectly, but still it didn't call the SSL security during the test buy. Please check the coding below. I truly appreciate any further help. Thanks.

// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
define('HTTP_SERVER', 'http://exophora.com:80');
define('HTTPS_SERVER', 'https://ssl127.securednshost.com/~exophora');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'yes');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/e-store/');
define('DIR_WS_HTTPS_CATALOG', '/e-store/');

The shared ssl pathway works fine, and I get the padlock on the storefront when I use it - but your links are still not pointing to the shared ssl address for secure pages.

If this is a Windows box that you are hosted on then check in includes/local/ to see if there is an alternative configure.php file in there. If you find one then rename or delete it.

Vger

Make sure that that you change the permissions on the includes/configure.php file to 777 then upload the modified one.....
then refresh ftp and reset permissions to 644

It would appear that you are not able to over write the configure.php file...

Okay, about the windows box thing, am not so familiar with that. Can you elaborate a little bit? I am trying all the possibilities.

Thanks.

The reference to being hosted on a Windows box refers to this problem:

If the install can't write to the includes/configure.php file, or to the admin/includes/configure.php file then it will create a stripped down (development only) version of configure.php inside the includes/local/ folder. This overrides the includes/configure.php file and can cause confusion. You upload an edited configure.php file and then wonder why the changes aren't being reflected in your website - well it's because of the includes/local/configure.php files (if they exist).

I was working just today on a Windows hosted site and wondering why the template was screwed up - and then found the local/configure.php files and found out why the template wasn't working properly.

This can occur on Apache servers as well, but it's far more common on Windows servers.

Vger

I checked and "includes/local/configure.php files" doesn't exist. I noticed that if I will change "SSL" to small letter, it doesn't do anything. If I change it back to capital letters, it enables the SSL but the link is broken when you try to attempt to log in. Now, I am so confused now. See codes below

from: define('ENABLE_SSL', 'true'); --enables the ssl but the link is broken. Page error to log in.

TO: define('ENABLE_ssl', 'true'); -- disables the ssl and webstore is fine.

Any other input?