how do i turn on sure sll for checkout and admin

When i upgraded to didnt choose to have SSL's on, now nothing secure. So how do i turn them on. In the config file it states the https address but is there a setting in admin or something. No forms are secure or checkout or admin

cheers

paul

You need to first buy an SSL certificate; then you can enable it in your cart. Look around - there are lots of companies selling them, and prices vary tremendously for the same actual security.

I have a secure area for my website, but i do not know how to make pages secure with it. I have put the secure address in the configure.php file but what do i need to do.

paul

paulFromWales:

I have a secure area for my website, but i do not know how to make pages secure with it. I have put the secure address in the configure.php file but what do i need to do.

paul
There are two configure files, including one for admin..
you have to alter both to enable SSL

Hi

is it in admin-include-configure.php

I changed both files to secure 'true'

and the one in admin has:
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');

which are both now true

Yet site still not secure, login area does not have secure adrress neither does checkout, any ideas?

paul

Who is your host? Do they use a Plesk control panel?

is it in admin-include-configure.php
yes that is correct..
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');
Correct, but you have only done half the alterations..
In BOTH configure files, you also have to alter
defines for https server
i.e.

 
define('HTTP_SERVER', 'http://yourzencart.com');
  define('HTTPS_SERVER', 'https://yourzencart.com');
  // Use secure webserver for checkout procedure?
  define('ENABLE_SSL', 'true');

Hi

Not sure what plesk control is, but i use heartinternet with a reseller account using shared hosting/SSL

paul

Post your config without your passwords.

Hi

config file number 1:

define('HTTP_SERVER', 'http://www.edenspirit.co.uk');
define('HTTPS_SERVER', 'https://web30.secure-secure.co.uk/edenspirit.co.uk');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', '/');

define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/');

define('DIR_WS_PHPBB', '/home/sites/edenspirit.co.uk/public_html/forum/');

// * DIR_FS_* = Filesystem directories (local/physical)
//the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
define('DIR_FS_CATALOG', '/home/sites/edenspirit.co.uk/public_html/');

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');
define('DIR_WS_UPLOADS', DIR_WS_IMAGES . 'uploads/');
define('DIR_FS_UPLOADS', DIR_FS_CATALOG . DIR_WS_UPLOADS);
define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/');

// define our database connection
define('DB_TYPE', 'mysql');
define('DB_PREFIX', ???_');
define('DB_SERVER', 'localhost');
define('DB_SERVER_USERNAME', ????);
define('DB_SERVER_PASSWORD', '???????');
define('DB_DATABASE', ????????);
define('USE_PCONNECT', 'false'); // use persistent connections?
define('STORE_SESSIONS', 'db'); // use 'db' for best support, or '' for file-based storage

// The next 2 "defines" are for SQL cache support.
// For SQL_CACHE_METHOD, you can select from: none, database, or file
// If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache
// or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder
// ie: /path/to/your/webspace/public_html/zen/cache -- leave no trailing slash
define('SQL_CACHE_METHOD', 'none');
define('DIR_FS_SQL_CACHE', '/home/sites/edenspirit.co.uk/public_html/cache');

?>

Confi file in adimn-includes:

define('HTTP_SERVER', 'http://www.edenspirit.co.uk');

define('HTTPS_SERVER', 'https://web30.secure-secure.co.uk/edenspirit.co.uk');

define('HTTP_CATALOG_SERVER', 'http://www.edenspirit.co.uk');
define('HTTPS_CATALOG_SERVER', 'https://web30.secure-secure.co.uk/https://www.edenspirit.co.uk');

// Use secure webserver for catalog module and/or admin areas?
define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_ADMIN', '/admin/');
define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_ADMIN', '/admin/');
define('DIR_WS_HTTPS_CATALOG', '/');

define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
define('DIR_WS_CATALOG_IMAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'images/');
define('DIR_WS_CATALOG_TEMPLATE', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/templates/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
define('DIR_WS_CATALOG_LANGUAGES', HTTP_CATALOG_SERVER . DIR_WS_CATALOG . 'includes/languages/');

// * DIR_FS_* = Filesystem directories (local/physical)
//the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
define('DIR_FS_ADMIN', '/home/sites/edenspirit.co.uk/public_html/admin/');
define('DIR_FS_CATALOG', '/home/sites/edenspirit.co.uk/public_html/');

define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');
define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');
define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');
define('DIR_FS_CATALOG_TEMPLATES', DIR_FS_CATALOG . 'includes/templates/');
define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');
define('DIR_FS_EMAIL_TEMPLATES', DIR_FS_CATALOG . 'email/');
define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

// define our database connection
define('DB_TYPE', ????);
define('DB_PREFIX', ???????_');
define('DB_SERVER', 'localhost');
define('DB_SERVER_USERNAME', ???????);
define('DB_SERVER_PASSWORD', '???????');
define('DB_DATABASE', ?????);
define('USE_PCONNECT', 'false'); // use persistent connections?
define('STORE_SESSIONS', 'db'); // use 'db' for best support, or '' for file-based storage

// The next 2 "defines" are for SQL cache support.
// For SQL_CACHE_METHOD, you can select from: none, database, or file
// If you choose "file", then you need to set the DIR_FS_SQL_CACHE to a directory where your apache
// or webserver user has write privileges (chmod 666 or 777). We recommend using the "cache" folder inside the Zen Cart folder
// ie: /path/to/your/webspace/public_html/zen/cache -- leave no trailing slash
define('SQL_CACHE_METHOD', 'none');
define('DIR_FS_SQL_CACHE', '/home/sites/edenspirit.co.uk/public_html/cache');

?>

Hope this helps

paul

Ask your host what the correct HTTPS address is. https://web30.secure-secure.co.uk/edenspirit.co.uk results in a 404 (page not found) error

Hi KIm

Well today the admin is secure so i am getting there, i noticed myself yesterday thay i had a: https:// in the secure address when it shoulh not be so that a bit of it anyway.

The hosting say:

We have mapped the URL:-

https://web30.secure-secure.co.uk/edenspirit.co.uk/ to http://www.edenspirit.co.uk

Please note the s in https.

So i assume putting https://web30.secure-secure.co.uk/ before the address makes it secure.

But today the login area and checkout are still not secure but admin is. This is a big issue which i am addressing straight away, i guess its just a case of keep pluggin away

I have been playing with these 2 files now and they are both starting to look the same and i am getting cross eyed.

In the admin config these 2 lines:

define('HTTP_CATALOG_SERVER', 'http://www.edenspirit.co.uk');
define('HTTPS_CATALOG_SERVER', 'https://web30.secure-secure.co.uk/edenspirit.co.uk');

should they also be in the store adimn file?

Could it be stuck in cahe and i got to wait and see if right, any ideas???

Thanks for your help

paul

paulFromWales:

define('HTTP_SERVER', 'http://www.edenspirit.co.uk');
define('HTTPS_SERVER', 'https://web30.secure-secure.co.uk/edenspirit.co.uk');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
// these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', '/');

define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
define('DIR_WS_TEMPLATES', DIR_WS_INCLUDES . 'templates/');

define('DIR_WS_PHPBB', '/home/sites/edenspirit.co.uk/public_html/forum/');

// * DIR_FS_* = Filesystem directories (local/physical)
//the following path is a COMPLETE path to your Zen Cart files. eg: /var/www/vhost/accountname/public_html/store/
define('DIR_FS_CATALOG', '/home/sites/edenspirit.co.uk/public_html/');

Those settings should be fine.
When you make your changes, are you sure they're uploading properly? If your /includes/configure.php file is read-only, then you'll have to make it writable before you can upload changes to it. You'll need to make it read-only again when you're done, so remember what permissions settings it had before you make changes.

Hi

I do not have any problems in ftp ing files back and fore. The admin is secure now but not the store, the settings look right, is there anything in the admin i need to set or something?

paul

SSL on/off is handled by the settings in your configure.php files. The admin uses the admin config file, and the storefront uses the non-admin config file. There are no special admin settings required.

What's different between your store and a fresh install of Zen Cart ?

Hi

What i did was upgrade. In the end of lots of playing around i ended up with a fresh upload and i then ftp'ed my template over AND upload the data from my old version DB file so some how the site worked with my template and the data was from version 1.3.0.1 and i updated the DB.

I think that is about what i did, so it is and it says the latest version in the admin version checker thing.

Its just that for some reason the store conf file isnt letting the secure pages appear.

Is there anything i can show you to check??

paul

Going to this address:> paulFromWales:

https://web30.secure-secure.co.uk/edenspirit.co.uk/
... brings up a page that reveals that Zen Cart is actually attempting to load this address instead:
https://www.edenspirit.co.uk/

That can only happen if the /includes/configure.php file (at wherever the https://web30.secure-secure.co.uk/edenspirit.co.uk/ URL points to) contains https://www.edenspirit.co.uk/ for the HTTPS_SERVER entry.

Hi

Well it is sorted. And i must apologise for my stupidity. I was always on the right track but as is always the case something simple or stpuid which is my case, i was looking at the admin - includes - config file and the config file (html folder), and missed out the includes-config file.

Anway its sorted now, and thank you for all your help guys.

Got a few other threads on the go, will not mention here but if you come across them any help would be great

Cheers

paul