Another SSL certificate / 1and1 problem...

[loveacrossborders]

I have a dedicated GeoTrust SSL certificate through my host 1and1 (America).

 

From reading posts in these forums I learned that for 1and1 I have to make the following change in application_top.php:

 

change

 

 ?

$request_type = ($_SERVER['HTTPS'] == 'on') ? 'SSL' : 'NONSSL';

 

to

 

 ?

$request_type = ($_SERVER['HTTPS'] == '1') ? 'SSL' : 'NONSSL';

 

What works:

When I load up my site the address has the "https" and the padlock at the bottom of the browser.

 

What doesn't work:

When I click to "login" to my Zen Cart account, I get a message in IE (and a similiar one in Firefox) that says the following:

 

?

 

You are about to be redirected to a connection that is not secure.

 

The information you are sending to the current site might be retransmitted to a nonsecure site. Do you wish to continue?

 

Obviously this is not a good message for customers to see when they login

:(.

 

What's strange is that the padlock is still there. It's just that this "Security Alert" comes up.

 

If anyone can help with suggestions I'd be ever so grateful :(.

 

I'm using OsC Milestone 2.2.

[♥Vger]

Firstly, having a dedicated ssl certificate whilst hosted with 1and1 is a complete waste of time - due to their stupid ssl set up. Best advice - find a new hosting company, one which doesn't have this sort of set up and doesn't use seperate folders for http and https, and you won't have these problems to try and sort out.

 

Now, to your immediate problem. You say that when you load up your site you have the https padlock showing in the browser. This should not be happening. You should only see the padlock when you move to a secure area of the site e.g. Login, Customer Accounts etc. OsCommerce is set up to load pages based upon whether or not they need to be on an https connection. From what you have said it sounds like you are trying to put the whole of your website behind ssl - bad move - causes problems - increases the amount of time it takes for the page to load. You need to set the http pathways to http://ww.yourdomain.com and the https pathways to https://www.yourdomain.com, and not set them all to https://www.yourdomain.com

 

Finally, this is the osCommerce forum and not the Zen Cart forum. Posts here should be about osCommerce, and not Zen Cart or any of the other offshoots of osCommerce. I appreciate your problem - you've probably posted to the Zen Cart forum, and like most of the people who post there you've got no reply. That's the problem you get when you use a piece of software which is not properly supported!

 

Vger