SSL on Painel admin

[Antena]

I can't add products or update the existing one since i've added SSL in my server.

Anyone can help pe to disabel SSL in admin painel or make changes necessary to it works properly?

 

How can as seen, all buttons are in Non-SSL mode, so, when submit anything is write.

 

 

Look the attached picture to check how the product appear 

 

 

https://i.imgsafe.org/3b9d94a44e.png

[Antena]

Now the clients can't login. Only redirect to index page.

Please, anyone help me.

[♥14steve14]

Post the contents of both of your configure files without the database information, and also any redirect code that you added into the htaccess files.

 

It may also help if you posted a link to the site.

 

It may alos help if you say what version of oscommerce you are using.

 

If it was me, I would replace the new files with copies of the files that you made before carrying out any changes and put the site back to how it was. At least then you will have a working site.

[ecommunlimited]

@@Antena

 

In admin/includes/configure.php the settings for SSL and Non SSL are below.

 

SSL Admin:

 

define('HTTP_SERVER', 'http://my-site.com');
define('HTTPS_SERVER', 'https://my-site.com');
define('ENABLE_SSL', false);

 

The images for the products and, the info for the products, are in two different tables in your database. I can see from the image you provided that, the image from the products table in your database is trying to load but, the products info from the products_description table is not. Did you alter the products_description table in your database?

 

Changes with SSL can cause issues with images sometime but, not generally the products info. You should go in your database and look in your products_description table and see if the info is there.

 

Take care

Bill

[Antena]

Thank you for try help me @@14steve14 and @@ecommunlimited. After one long night in front of notebook i make this work properly.

 

So, to members who have same problem, there's my configuration to SSL work's fine in all site.

 

 

First chaned t in /includes/configuration.php to:

// Define the webserver and path parameters
// * DIR_FS_* = Filesystem directories (local/physical)
// * DIR_WS_* = Webserver directories (virtual/URL)
  define('HTTP_SERVER', 'https://www.domain.com'); // eg, http://localhost - should not be empty for productive servers
  define('HTTPS_SERVER', 'https://www.domain.com'); // eg, https://localhost - should not be empty for productive servers
  define('ENABLE_SSL', true); // secure webserver for checkout procedure?
  define('HTTP_COOKIE_DOMAIN', 'www.domain.com');
  define('HTTPS_COOKIE_DOMAIN', 'www.domain.com');

After it changed admin /includes/configuration.php to :

// Define the webserver and path parameters
// * DIR_FS_* = Filesystem directories (local/physical)
// * DIR_WS_* = Webserver directories (virtual/URL)
  define('HTTP_SERVER', 'https://www.domain.com'); // eg, http://localhost - should not be empty for productive servers
  define('HTTP_CATALOG_SERVER', 'http://www.domain.com');
  define('HTTPS_CATALOG_SERVER', 'https://www.domain.com');
  define('ENABLE_SSL_CATALOG', true); // secure webserver for catalog module

After it worked normal but client's could not login in store. So i have changed inside of the store admin painel go to Configuration ->> Sessions: and change to theses values:

Force Cookie Use	True	
Check SSL Session ID	True	
Check User Agent	True	
Check IP Address	True	
Prevent Spider Sessions	True	
Recreate Session	True	

Also here's my .htaccess:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]

<IfModule mod_headers.c>
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains"
Header unset X-Powered-By
Header unset Server
Header set X-Content-Type-Options "nosniff"
Header set X-XSS-Protection "1; mode=block"
<FilesMatch "\.(appcache|atom|bbaw|bmp|crx|css|cur|eot|f4[abpv]|flv|geojson|gif|htc|ico|jpe?g|js|json(ld)?|m4[av]|manifest|map|mp4|oex|og[agv]|opus|otf|pdf|png|rdf|rss|safariextz|svgz?|swf|topojson|tt[cf]|txt|vcard|vcf|vtt|webapp|web[mp]|woff2?|xloc|xml|xpi)$">
    Header unset X-XSS-Protection
</FilesMatch>
</ifModule>

Hope this help someone more.