SSL Security Problems

[Guest]

I have recently purchased a GeoTrust SSL Cert, installed it on my server. I use websitesource as a host. With no luck, I have been trying to work with my configure.php file to make it show the account login and the cart as secured.

 

I have noticed that in my file manager on my host I have a security folder called ssl.conf/mydomain.com

 

I keep reading that people need to change the links to all pictures and hyperlinks on the pages I want secure to make it fully secure. Now looking at the account.php, login.php, etc, I will see spots like this:

 

?php echo tep_image(DIR_WS_IMAGES . 'table_background_account.gif', HEADING_TITLE, HEADING_IMAGE_WIDTH, HEADING_IMAGE_HEIGHT); ?>

 

But how do I change that picture link to https:// ??

 

Also, do I use this ssl.conf/mydomain.com folder to store anything??

 

For reference, here is my configure.php file. I am also not using the /catalog extension on my site as I having all pages stored in the root folder of the site.

 

define('HTTP_SERVER', 'http://www.tech2ucrew.com'); 
 define('HTTPS_SERVER', 'https://www.tech2ucrew.com'); 
 define('ENABLE_SSL', true); // secure webserver for checkout procedure?
 define('HTTP_COOKIE_DOMAIN', 'www.tech2ucrew.com');
 define('HTTPS_COOKIE_DOMAIN', 'https://ssl.conf/tech2ucrew.com'); <--- i have tried this as this link, and as www.tech2ucrew.com
 define('HTTP_COOKIE_PATH', 'www.tech2ucrew.com');
 define('HTTPS_COOKIE_PATH', 'ssl.conf/tech2ucrew.com'); <---i have tried this link as this and as www.tech2ucrew.com
 define('DIR_WS_HTTP_CATALOG', '/'); // if not set, will take away page format
 define('DIR_WS_HTTPS_CATALOG', '/');
 define('DIR_WS_IMAGES', 'images/');
 define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
 define('DIR_WS_INCLUDES', 'includes/');
 define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
 define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
 define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
 define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
 define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');
 define('DIR_FS_CATALOG', dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']));    <---- what does this do?? *******
 define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
 define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

[ozcsys]

You do not need to go through your files and change links. If you make the proper changes to your two configure.php files the site will switch from ssl to non ssl without a problem. Now about whether you need to duplicate files this is something you need to find out from your host, some hosting setups require this most do not.

[Guest]

I just went through the same process however I have a dedicated SSL, my hosting company used a public folder and a secured folder off of the root so I had to basically duplicate the site in both folders then tweak the configuration files.

 

it took a while but it works now.

 

for the record i have httpdocs and httpsdocs the cert is installed in httpsdocs.

[Guest]

ok i tested this... i have a folder called ssl.conf / mydomain.com in my file manager, but i get errors when uploading to this folder, so it might not be needed to upload to two seperate locations...

 

i think my main problem is that when i start out on my page:

 

http://www.tech2ucrew.com

 

and click on any link, it goes to the link, but erases the "www" part of the link..

 

So since my SSL Certificate is registered to "www.tech2ucrew.com", i think it wont register or something b/c its not using that link in the browser.'

 

Any suggestions??

 

Thanks

[♥Vger]

I'm sure I answered this. Some hosting set ups (not the good ones) need to add the www. part of your domain as an alias for it to work. You need to get in touch with them and ask them why it's not working.

 

Vger