private vs public folders

[sigzag]

My current host requires that all securce pages be placed in a seperate private folder. This requires two sets of files to be maintained but things worked OK.

I requested that they symlink the private to the public folder so that I might be able to maintain one set of files in public_html which they have done.

Now when I try to connect to a secure page such as the "account page" I get the following error:

 

"You don't have permission to access /account.php on this server.

 

Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request."

 

 

Here is a snippet of my config file:

 

define('HTTP_SERVER', 'http://www.mystore.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://www.mystore.com'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'www.mystore.com');

define('HTTPS_COOKIE_DOMAIN', 'www.mystore.com');

define('HTTP_COOKIE_PATH', '/');

define('HTTPS_COOKIE_PATH', '/');

define('DIR_WS_HTTP_CATALOG', '/');

define('DIR_WS_HTTPS_CATALOG', '/');

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');

define('DIR_FS_CATALOG', '/home/country/domains/mystore.com/public_html/');

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

 

As long as "Enable SSL" is set to false the site works fine but no lock icon on the secure pages.

 

I have a geotrust SSL cert...does it also need to be reconfigured or is this a scripting problem in my code?

 

Any help is appreciated.

[♥Vger]

This is a problem with your hosting company. There is absolutely no reason (apart from a bad server set up) as to why you should have to have a seperate ssl folder when you have a full ssl certificate installed.

 

Unfortunately quite a few companies use this 'seperate ssl' folder type of set up - but the majority do not. You need to find one of the majority. Various people have posted to this forum after having symbolic links installed from their ssl folder to their normal http folder, and to my knowledge they have all had problems.

 

I reiterate - your hosting company is just making things unnecessarily difficult for you as a result of the set up they use. Once you have a full ssl cert and it is installed properly, setting it up to run properly should be dead easy.

 

Vger

[sigzag]

This is a problem with your hosting company.  There is absolutely no reason (apart from a bad server set up) as to why you should have to have a seperate ssl folder when you have a full ssl certificate installed.

 

Unfortunately quite a few companies use this 'seperate ssl' folder type of set up - but the majority do not.  You need to find one of the majority.  Various people have posted to this forum after having symbolic links installed from their ssl folder to their normal http folder, and to my knowledge they have all had problems.

 

I reiterate - your hosting company is just making things unnecessarily difficult for you as a result of the set up they use.  Once you have a full ssl cert and it is installed properly, setting it up to run properly should be dead easy.

 

Vger

<{POST_SNAPBACK}>

 

 

Thanks Vger, that is what I figured.

 

I have a new hosting company in mind that had been recommended in these forums...they supply and install the full SSL Cert for $49.00 a year and only have one private folder. Cost is a little higher at $24.95 a month but that includes a reseller account with unlimited domains and databases.

 

Guess it is time to move up to a real server.

 

 

Thanks again.

[♥Vger]

That sounds like direct advertising to me - and that is against forum rules. In any event I've been around too long to trust any company with glowing 'testimonials' which include a name, a vague geographical location, and no web address associated with the testimonial. I actually checked out one of the names and addresses quoted there - and they were linked to two websites, neither of which appear to be hosted by by the hosting company.

 

 

Vger

[sigzag]

That sounds like direct advertising to me - and that is against forum rules.? In any event I've been around too long to trust any company with glowing 'testimonials' which include a name, a vague geographical location, and no web address associated with the testimonial.? I actually checked out one of the names and addresses quoted there - and they were linked to two websites, neither of which appear to be hosted by the hosting company.

 

Vger

<{POST_SNAPBACK}>

 

 

 

Sorry for posting the link...I will inform the admins to have it removed.

Thanks for the advice.