Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

HTTPS but no gold padlock


livefooduk

Recommended Posts

Continued from http://www.www.oscommerce.com/forums/viewtopic.php?t=29435

That is how it is:

DocumentRoot = '/homepages/4/d72430247/htdocs'

http://www.livefoodshop.co.uk = '/homepages/4/d72430247/htdocs'

https://sslrelay.com/livefoodshop.co.uk = '/homepages/4/d72430247/htdocs'

Yes, that's true but it does get relayed through sslrelay.com doesn't it?

BTW this is getting pretty offtopic, I'd appreciate it if you want to start a new thread on it...

 

thnx

sslrelay.com is just the domain name on the ssl certificate which is shared by all the users of my service provider, it is not on another server.

Best wishes

Steve

Link to comment
Share on other sites

  • Replies 111
  • Created
  • Last Reply

Can I visit your catalog? Is it online somewhere? (couldn't find it on livefood.co.uk, get a 'parked domain' page.. /catalog is forbidden)

Regards,

Mattice

"Politics is the art of preventing people from taking part in affairs which properly concern them"

Link to comment
Share on other sites

Hmm.. strange. It doesn't with me. And it's not DNS as the root directory comes up like stated before....

 

Could anybody else be so kind as to check this for Steve and me?

 

Cheers,

mattice

"Politics is the art of preventing people from taking part in affairs which properly concern them"

Link to comment
Share on other sites

Hmm.. strange. It doesn't with me. And it's not DNS as the root directory comes up like stated before....

 

Could anybody else be so kind as to check this for Steve and me?

 

Cheers,

mattice

What browser are you using? I have a flash .swf menu at the top maybe that was stopping it from loading

Best wishes

Steve

Link to comment
Share on other sites

Thnx...

 

using Mozilla instead of IE takes me there... So it must be me.

MS products.. aaargh.

 

I'm actually thinking of sending you halve a kilogram of 'frozen rodents' Linda...

They're real easy to keep :D

What was your address again?

"Politics is the art of preventing people from taking part in affairs which properly concern them"

Link to comment
Share on other sites

mmmh ... I see, couldn't that actually be the cause?

    <td align =" center"><object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"

codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=5,0,0,0"

WIDTH=800 HEIGHT=80>

 

:?:

"Politics is the art of preventing people from taking part in affairs which properly concern them"

Link to comment
Share on other sites

mmmh ... I see, couldn't that actually be the cause?

    <td align =" center"><object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"

codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=5,0,0,0"

WIDTH=800 HEIGHT=80>

 

:?:

The cause of the security alert? answer no. Because I still have the security alert with out it and if you right click the other graphics on the https pages and select properties you will see the url starts with an http and not https

Best wishes

Steve

Link to comment
Share on other sites

Try it again now I have removed the flash menu, oh and I found out why the site was not loading with IE there was a missing </td> I know some versions of IE are more picky than others about little things like that :oops:

Best wishes

Steve

Link to comment
Share on other sites

Okay... I never use SWF files so I didn't know if <object> stuff does or doesn't that...

 

Fatal error: Failed opening required 'includes/languages/.php' (include_path='.:/usr/local/lib/php') in /homepages/36/d69024189/htdocs/catalog/includes/application_top.php on line 250

 

is my latest success story in connecting to your site.. So much for my credibility :(

 

What I do not get is why the images still show http:// with the mentioned setup.. Must be the shared setup I think...

 

My server:

// ssl = secure.mybox.com

// regular = www.mybox.com

// both point to same location 

// html source in SSL will show:



<a href="http://www.mybox.com/somewhere.php"><img src="https://secure.mybox.com/images/some_image.gif"></a>

 

What do yours say exactly?

"Politics is the art of preventing people from taking part in affairs which properly concern them"

Link to comment
Share on other sites

Erm you are looking at the wrong site now, homepages/36/d69024189/htdocs is www.livefood.co.uk (where I have my old shop) but I am setting up a new one on my new dedicated server at www.livefoodshop.co.uk

Best wishes

Steve

Link to comment
Share on other sites

See ... you're making it WAY to hard for simple folkes like me :oops:

"Politics is the art of preventing people from taking part in affairs which properly concern them"

Link to comment
Share on other sites

Hey.. I know that penguin... ;)

 

I think I've located the problem...

Do you have this on each page:

<base href="<?php echo (getenv('HTTPS') == 'on' ? HTTPS_SERVER : HTTP_SERVER) . DIR_WS_CATALOG; ?>">

 

 

Because the source of the login.php page gives me:

<base href="http://www.livefoodshop.co.uk/catalog/">

 

That should be

<base href="http://sslrelay.com/livefoodshop.co.uk/catalog/">

"Politics is the art of preventing people from taking part in affairs which properly concern them"

Link to comment
Share on other sites

I meant it should be

<base href="https://sslrelay.com/livefoodshop.co.uk/catalog/">

obviously.

"Politics is the art of preventing people from taking part in affairs which properly concern them"

Link to comment
Share on other sites

Yes I haave

 <base href="<?php echo (getenv('HTTPS') == 'on' ? HTTPS_SERVER : HTTP_SERVER) . DIR_WS_CATALOG; ?>">

on each page but if I change it to

<base href="<?php echo (getenv('HTTPS') == 'on' ? HTTP_SERVER : HTTPS_SERVER) . DIR_WS_CATALOG; ?>">

on all the pages that should be ssl (login, checkout etc.) then I get the gold padlock on the https pages but then I get the security alert (page contains both secure and insecure items....) when leaving the https pages

Best wishes

Steve

Link to comment
Share on other sites

Ehmm.. lemme see. You have your configure.php set correctly.

Something is causing it to spit out the regular base href when it should be SSL. The code I quoted is correct. Changing the values does not do it.

So what happens if you take the login.php page (or another SSL page) and force it to be SSL base href'd?

 

// this is an SSL page

<base href="<?php echo HTTPS_SERVER . DIR_WS_CATALOG; ?>">

 

The only thing I can think of now is that getenv('HTTPS') doesn't quite return what it should return...

 

Obviously when trying this code any link to a 'non-sll' page will give a warning.

 

Mattice

"Politics is the art of preventing people from taking part in affairs which properly concern them"

Link to comment
Share on other sites

I changed that on login.php and I do get the gold padlock :) on that page but I do get the exactly the same effect if I change it to

<base href="<?php echo (getenv('HTTPS') == 'on' ? HTTP_SERVER : HTTPS_SERVER) . DIR_WS_CATALOG; ?>">

as seen on create_account.php

Best wishes

Steve

Link to comment
Share on other sites

You shouldn't realy...

 

<?php echo (getenv('HTTPS') == 'on' ? HTTP_SERVER : HTTPS_SERVER) . DIR_WS_CATALOG; ?>">

means:

if (getenv('HTTPS') == 'on') { // <-if we have SSL

  print HTTP_SERVER;           // <-regular server

 } else {                    //<-on all other results

  print HTTPS_SERVER          // <-SSL server

}

"Politics is the art of preventing people from taking part in affairs which properly concern them"

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...