Zen Cart Logo
Forums / Basic Configuration / No HTTPS folder, is this right?

No HTTPS folder, is this right?

Locked

Views: 5,023

Results 1 to 19 of 19
This thread is locked. New replies are disabled.
6 May 2007, 7:20 PM
#1
mesamexicanfoods avatar

mesamexicanfoods

New Zenner

Join Date:
May 2007
Posts:
3
Plugin Contributions:
0

No HTTPS folder, is this right?

Hello,

New to Zen Cart, and have been trying to find this info on the forums with no luck. I am working on securing my site, and I noticed that I don't have an HTTPS folder in my site when I look in file manager. I set up the configuration settings for using a shared SSL, and the site is going over to the shared SSL url during checkout.

Am I really secure? Since I couldn't find anyplace to upload my store to in a secure area, can I really be secure? Is it possible that I don't need to upload to a secure area? I haven't asked my host to do anything for me, so I know they haven't changed anything.

Any help would be appreciated!

Thank you,
Jacqueline

6 May 2007, 7:25 PM
#2
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
4

Re: No HTTPS folder, is this right?

not all server setups have a secure folder,

cpanel serves all from 1 server and it is just as secure as hagging 2 seperate folders and its a LOT less headache

19 May 2007, 10:06 PM
#3
hound avatar

hound

New Zenner

Join Date:
Jan 2007
Posts:
59
Plugin Contributions:
0

Re: No HTTPS folder, is this right?

If I am following this correctly that would mean that on Cpanel sites the editing in the config files would not need to include lines with "https" ? Is this correct? We could just leave them as "http" and add the path?

19 May 2007, 10:08 PM
#4
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
4

Re: No HTTPS folder, is this right?

no you will need to use the http and the https paths in the site name defines but you dont have to have 2 seperate sets of files

19 May 2007, 10:11 PM
#5
hound avatar

hound

New Zenner

Join Date:
Jan 2007
Posts:
59
Plugin Contributions:
0

Re: No HTTPS folder, is this right?

Since you are responding so quickly, if I post my config files, can you tell me how the heck I managed to lock myself out of the admin?

19 May 2007, 10:32 PM
#6
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
4

Re: No HTTPS folder, is this right?

sure
post the top 40 lines

21 May 2007, 4:46 PM
#7
hound avatar

hound

New Zenner

Join Date:
Jan 2007
Posts:
59
Plugin Contributions:
0

Re: No HTTPS folder, is this right?

**admin/includes/configure.php:

/************* NOTE: This file is similar, but DIFFERENT from the "store" version of configure.php. /
/
**** The 2 files should be kept separate and not used to overwrite each other. ***********/

// Define the webserver and path parameters
// Main webserver: eg, http://localhost - should not be empty for productive servers
// HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
// HTTP_CATALOG_SERVER is your Main webserver: eg, http://www.yourdomain.com
// HTTPS_CATALOG_SERVER is your Secure webserver: eg, https://www.yourdomain.com
/*

  • URLs for your site will be built via:
  • HTTP_SERVER plus DIR_WS_ADMIN or
    
  • HTTPS_SERVER plus DIR_WS_HTTPS_ADMIN or
    
  • HTTP_SERVER plus DIR_WS_CATALOG or
    
  • HTTPS_SERVER plus DIR_WS_HTTPS_CATALOG
    
  • ...depending on your system configuration settings
    */

if( $_SERVER["SERVER_NAME"]=="localhost") {

define('HTTP_SERVER', 'http://www.wholesomehound.com');
define('HTTPS_SERVER', 'http://www.wholesomehound.com');
define('HTTP_CATALOG_SERVER', 'http://www.wholesomehound.com');
define('HTTPS_CATALOG_SERVER', 'http://www.wholesomehound.com');
// * DIR_FS_* = Filesystem directories (local/physical)
//the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
define('DIR_FS_ADMIN', 'c:/wamp/www/wholesomehounds/admin/');
define('DIR_FS_CATALOG', 'c:/wamp/www/wholesomehound/');

// define our database connection
define('DB_TYPE', 'mysql');
define('DB_PREFIX', 'zen_');
define('DB_SERVER', 'localhost');
define('DB_SERVER_USERNAME', 'root');
define('DB_SERVER_PASSWORD', '');
define('DB_DATABASE', 'wholesom_zc1');
define('USE_PCONNECT', 'false'); // use persistent connections?
define('STORE_SESSIONS', 'db'); // use 'db' for best support, or '' for file-based storage

// The next 2 "defines" are for SQL cache support.
// For SQL_CACHE_METHOD, you can select from: none, database, or file
// If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache
// or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder
// ie: /path/to/your/webspace/public_html/zen/cache -- leave no trailing slash
define('SQL_CACHE_METHOD', 'database');
define('DIR_FS_SQL_CACHE', '/home/wholesom/public_html/cache');

} else {

define('HTTP_SERVER', 'http://wholesomehound.com');
define('HTTPS_SERVER', 'http://wholesomehound.com');
define('HTTP_CATALOG_SERVER', 'http://wholesomehound.com');
define('HTTPS_CATALOG_SERVER', 'http://wholesomehound.com');

// * DIR_FS_* = Filesystem directories (local/physical)
//the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
define('DIR_FS_ADMIN', '/home/wholesom/public_html/admin/');
define('DIR_FS_CATALOG', '/home/wholesom/public_html/');

**Includes/configure.php

**

21 May 2007, 4:48 PM
#8
hound avatar

hound

New Zenner

Join Date:
Jan 2007
Posts:
59
Plugin Contributions:
0

Re: No HTTPS folder, is this right?

/*************** NOTE: This file is similar, but DIFFERENT from the "admin" version of configure.php. /
/
**** The 2 files should be kept separate and not used to overwrite each other. ***********/

// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
if( $_SERVER["SERVER_NAME"]=="localhost") {
define('HTTP_SERVER', 'http://www.wholesomehound.com');
define('HTTPS_SERVER', 'http://www.wholesomehound.com');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', '/');

I managed to get back into the admin but I still do not have a lock appearing on my pages.

I am using Cpanel to access these files and my cert is installed on my server.

21 May 2007, 4:49 PM
#9
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
4

Re: No HTTPS folder, is this right?

you need to change this
define('HTTPS_SERVER', 'http://www.wholesomehound.com');
to
define('HTTPS_SERVER', 'https://www.wholesomehound.com');

21 May 2007, 5:24 PM
#10
hound avatar

hound

New Zenner

Join Date:
Jan 2007
Posts:
59
Plugin Contributions:
0

Re: No HTTPS folder, is this right?

Merlinpa1969:

you need to change this
define('HTTPS_SERVER', 'http://www.wholesomehound.com');
to
define('HTTPS_SERVER', 'https://www.wholesomehound.com');

Even though I am not using an https folder? Cpanel does not require a separate https folder and I do not have one. Do I need to make one and copy everything over to it? I thought that I had read that it was not needed? Now I am confused.

I changed it and still no lock...

21 May 2007, 5:31 PM
#11
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
4

Re: No HTTPS folder, is this right?

NO
cpanel servers port 80 and 443 from the same folder,
make sure that you have the defines set to use https and also that you have ssl set to true

21 May 2007, 6:00 PM
#12
hound avatar

hound

New Zenner

Join Date:
Jan 2007
Posts:
59
Plugin Contributions:
0

Re: No HTTPS folder, is this right?

Merlinpa1969:

NO
cpanel servers port 80 and 443 from the same folder,
make sure that you have the defines set to use https and also that you have ssl set to true

Done. Still no lock at the bottom. Could it be the "www." ?
or the ".com" what about this line
** if( $_SERVER["SERVER_NAME"]=="localhost") {**

should I change localhost to match the https server name?

admin/includes.configure.php

/*************** NOTE: This file is similar, but DIFFERENT from the "store" version of configure.php. /
/
**** The 2 files should be kept separate and not used to overwrite each other. ***********/

// Define the webserver and path parameters
// Main webserver: eg, http://localhost - should not be empty for productive servers
// HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
// HTTP_CATALOG_SERVER is your Main webserver: eg, http://www.yourdomain.com
// HTTPS_CATALOG_SERVER is your Secure webserver: eg, https://www.yourdomain.com
/*

  • URLs for your site will be built via:
  • HTTP_SERVER plus DIR_WS_ADMIN or
    
  • HTTPS_SERVER plus DIR_WS_HTTPS_ADMIN or
    
  • HTTP_SERVER plus DIR_WS_CATALOG or
    
  • HTTPS_SERVER plus DIR_WS_HTTPS_CATALOG
    
  • ...depending on your system configuration settings
    */

if( $_SERVER["SERVER_NAME"]=="localhost") {

define('HTTP_SERVER', 'http://www.wholesomehound.com');
define('HTTPS_SERVER', 'https://www.wholesomehound.com');
define('HTTP_CATALOG_SERVER', 'http://www.wholesomehound.com');
define('HTTPS_CATALOG_SERVER', 'https://www.wholesomehound.com');
// * DIR_FS_* = Filesystem directories (local/physical)
//the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
define('DIR_FS_ADMIN', 'c:/wamp/www/wholesomehounds/admin/');
define('DIR_FS_CATALOG', 'c:/wamp/www/wholesomehound/');

21 May 2007, 6:50 PM
#13
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
4

Re: No HTTPS folder, is this right?

in your includes/configure.php find this

define('HTTP_SERVER', 'http://www.wholesomehound.com');
define('HTTPS_SERVER', 'http://www.wholesomehound.com');

change it to this

define('HTTP_SERVER', 'http://www.wholesomehound.com');
define('HTTPS_SERVER', 'https://wholesomehound.com');

where did that IF statement above teh define come from?

21 May 2007, 7:49 PM
#14
hound avatar

hound

New Zenner

Join Date:
Jan 2007
Posts:
59
Plugin Contributions:
0

Re: No HTTPS folder, is this right?

Merlinpa1969:

in your includes/configure.php find this

define('HTTP_SERVER', 'http://www.wholesomehound.com');
define('HTTPS_SERVER', 'http://www.wholesomehound.com');

change it to this

define('HTTP_SERVER', 'http://www.wholesomehound.com');
define('HTTPS_SERVER', 'https://wholesomehound.com');

where did that IF statement above teh define come from?

Done! I have no idea where the IF statement came from. Should I comment it out?

Also, should I make changes to the htaccess file?

**Here is the includes/configure.php, as edited...

<?php
/

*

  • @package Configuration Settings
  • @copyright Copyright 2003-2006 Zen Cart Development Team
  • @copyright Portions Copyright 2003 osCommerce
  • @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
    */

/*************** NOTE: This file is similar, but DIFFERENT from the "admin" version of configure.php. /
/
**** The 2 files should be kept separate and not used to overwrite each other. ***********/

// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
if( $_SERVER["SERVER_NAME"]=="localhost") {
define('HTTP_SERVER', 'http://www.wholesomehound.com');
define('HTTPS_SERVER', 'https://wholesomehound.com');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', '/');

define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/');

define('DIR_WS_PHPBB', '/');

// * DIR_FS_* = Filesystem directories (local/physical)
//the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
define('DIR_FS_CATALOG', 'c:/wamp/www/wholesomehound/');

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');
define('DIR_WS_UPLOADS', DIR_WS_IMAGES . 'uploads/');
define('DIR_FS_UPLOADS', DIR_FS_CATALOG . DIR_WS_UPLOADS);
define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/');

// define our database connection
define('DB_TYPE', 'mysql');
define('DB_PREFIX', 'zen_');
define('DB_SERVER', 'localhost');
define('DB_SERVER_USERNAME', 'root');
define('DB_SERVER_PASSWORD', '');
define('DB_DATABASE', 'wholesom_zc1');
define('USE_PCONNECT', 'false'); // use persistent connections?
define('STORE_SESSIONS', 'db'); // use 'db' for best support, or '' for file-based storage

// The next 2 "defines" are for SQL cache support.
// For SQL_CACHE_METHOD, you can select from: none, database, or file
// If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache
// or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder
// ie: /path/to/your/webspace/public_html/zen/cache -- leave no trailing slash
define('SQL_CACHE_METHOD', 'database');
define('DIR_FS_SQL_CACHE', 'c:/wamp/www/wholesomehound/cache');
}
else
{
define('HTTP_SERVER', 'http://wholesomehound.com');
define('HTTPS_SERVER', 'https://wholesomehound.com');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', '/');

define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/');

define('DIR_WS_PHPBB', '/');

// * DIR_FS_* = Filesystem directories (local/physical)
//the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
define('DIR_FS_CATALOG', '/home/wholesom/public_html/');

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');
define('DIR_WS_UPLOADS', DIR_WS_IMAGES . 'uploads/');
define('DIR_FS_UPLOADS', DIR_FS_CATALOG . DIR_WS_UPLOADS);
define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/');

// define our database connection
define('DB_TYPE', 'mysql');
define('DB_PREFIX', 'zen_');
define('DB_SERVER', 'localhost');
define('DB_SERVER_USERNAME', '');
define('DB_SERVER_PASSWORD', '
');
define('DB_DATABASE', '
*****');
define('USE_PCONNECT', 'false'); // use persistent connections?
define('STORE_SESSIONS', 'db'); // use 'db' for best support, or '' for file-based storage

// The next 2 "defines" are for SQL cache support.
// For SQL_CACHE_METHOD, you can select from: none, database, or file
// If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache
// or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder
// ie: /path/to/your/webspace/public_html/zen/cache -- leave no trailing slash
define('SQL_CACHE_METHOD', 'database');
define('DIR_FS_SQL_CACHE', '/home/wholesom/public_html/cache');
}
?>

21 May 2007, 7:53 PM
#15
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
4

Re: No HTTPS folder, is this right?

what do you have in the htaccess file?

who set that up for you

21 May 2007, 8:33 PM
#16
hound avatar

hound

New Zenner

Join Date:
Jan 2007
Posts:
59
Plugin Contributions:
0

Re: No HTTPS folder, is this right?

I did not set up the files and did not have anyone else set them up. I took for granted that they were stock files.**

Should I comment out the "IF" statement in the other file?

.htaccess from public_html/.htaccess**

-FrontPage-

IndexIgnore .htaccess /.?? *~ *# /HEADER /README /_vti

order deny,allow
deny from all
allow from all

order deny,allow
deny from all

AuthName https://www.wholesomehound.com
AuthUserFile /home/wholesom/public_html/_vti_pvt/service.pwd
AuthGroupFile /home/wholesom/public_html/_vti_pvt/service.grpAdditional .htaccess file in same directory
Filename is
.htaccess.1170515047
# -FrontPage-

IndexIgnore .htaccess /.?? *~ *# /HEADER /README /_vti

order deny,allow
deny from all
allow from all

order deny,allow
deny from all

AuthName https://www.wholesomehound.com
AuthUserFile /home/wholesom/public_html/_vti_pvt/service.pwd
AuthGroupFile /home/wholesom/public_html/_vti_pvt/service.grp

21 May 2007, 8:36 PM
#17
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
4

Re: No HTTPS folder, is this right?

Ok better question,

Where did you get the files that you installed?

21 May 2007, 8:40 PM
#18
hound avatar

hound

New Zenner

Join Date:
Jan 2007
Posts:
59
Plugin Contributions:
0

Re: No HTTPS folder, is this right?

Merlinpa1969:

Ok better question,

Where did you get the files that you installed?

Zen Cart was listed in my host cpanel under fantastico and I installed it from there.

21 May 2007, 9:06 PM
#19
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
4

Re: No HTTPS folder, is this right?

Ok well its fixed,

for the record fantastico instal SUX