Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

How Much of the Site Should Be SSL Encrypted?


Marvin Miller

Recommended Posts

Hi;

 

I run osCommerce Milestone 2 and was going through the catalog when I noticed that it seems every page is SSL encrypted.

 

Shouldn't it just be pages where a client log's in and pays with his card?

 

This is what my configure.php looks like although when I change it the changes don't seem to take place right away. I imagine the session has to time out first?

 

Best & Thanks!

Best & Thanks;
Marvin
----------------------
osCommerce 2.3.3.4 

Link to comment
Share on other sites

It should just be the checkout log-in etc thats secure, SSL will slow down your site.

You haven't included your configure.php to have a look at, as you say in your question!

 

Julian

A little knowledge is dangerous, I SHOULD KNOW.

If Life Begins At 40, What ends????

Link to comment
Share on other sites

dOh!

 

My bad - it was getting late last night and the time change must have done me in :-"

 

Here's the contents that should have been posted the first time around;

 

define('HTTP_SERVER', 'http://frostysac.com');

define('HTTP_CATALOG_SERVER', 'http://www.frostysac.com');

define('HTTPS_CATALOG_SERVER', 'https://host212.ipowerweb.com/~frostysa');

define('ENABLE_SSL_CATALOG', 'true');

define('DIR_FS_DOCUMENT_ROOT', '/home/frostysa/public_html/catalog/');

Best & Thanks;
Marvin
----------------------
osCommerce 2.3.3.4 

Link to comment
Share on other sites

Just been on your site and it's all http from all the pages i clicked on?

 

Anyway, looking at the config.php

You need your full address in:-

define('HTTP_SERVER', 'http://frostysac.com');

ie, www

also, looking at it, not 100% sure though because my host has my SSL certificate.

Your https, should be the same address except adding the "s" in https

 

Julian

A little knowledge is dangerous, I SHOULD KNOW.

If Life Begins At 40, What ends????

Link to comment
Share on other sites

Hi Julian;

 

I changed the first line back to the http://www.frostysac.com as you recommended.

 

I still find that only the opening page is in Http - any time I look at a product through browsing I am showing SSL all the time.

 

So it seems to me that all pages except the opening one are SSL. Is your site this way?

 

Thanks;

Marvin

Best & Thanks;
Marvin
----------------------
osCommerce 2.3.3.4 

Link to comment
Share on other sites

Thank you vger!

 

You just solved the issue for me - I wasn't aware there were two files called configure.php - I was editing one but not the other.

 

As soon as I edited the other one (located in /catalog/includes/) everything worked perfectly. In fact, it not only solved the SSL issue but also fixed the warning message that used to show up when viewing SSL pages.

 

ThankS!

Best & Thanks;
Marvin
----------------------
osCommerce 2.3.3.4 

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...