Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

Fasthosts & Shared SSL


g_p

Recommended Posts

I apologise if this has already been covered but I have searched extensively and am near to the point of pulling hair out!

 

I am based in the UK and new to OScommerce (which I must say I've found very impressive). I have successfully created a local shop with the UK install files and a number of contributions and have recently signed up with Fasthosts to host a live version. I phoned them before hand and was told that there would be no problem hosting OScommerce... little did I know!

 

The main site works fine - hosted on a Linux server. The problem (and a fairly crucial one) is that the shared SSL runs on a separate Windows server with register_globals switched off. I have asked for it to be turned on and been told no due to security reasons.

 

I have therefore tried using the register_globals contribution but get errors (such as: Fatal error: Call to undefined function: tep_href_link() in E:\SSLRoot\xxxxx\includes\languages\english.php on line 287).

 

I'm therefore not sure what to do. Can anyone provide some assistance on a workaround for the register_globals problem? Has anyone made it work on Fasthosts, or can you suggest a better UK-based host that will actually live up to promises?

 

With the shared SSL on a separate server, which files also need to be uploaded to that server? The whole install or just a select few?

 

Again, apologies if I've missed this in the documentation but I've been round in circles and am now dizzy.... any help would be greatly appreciated. Thanks.

Link to comment
Share on other sites

Hi Gary,

 

I can't be of much help, but I am experiencing similar problems trying to get my shared SSL server to work. I am with stremline.net and I think my situation is very similar to yours. I am on a Linux box, and my https files are not showing at all.

 

I also do not know which files and the structure (i.e. the same as osCommerce folders) to upload. If anyone can shed any light on this, please, please do so! :'(

 

I need my SSL working properly ASAP. :(

 

David

Link to comment
Share on other sites

Anytime you have one of those cheap shared SSLs from your host that give you a folder on a different server than the rest of your account, I'd say you are asking for trouble.

 

I'd suggest purchasing your own SSL from rapidssl.com or instantssl.com afor $50 per year, and having your host install it. You will need to purchase a static IP, but they are inexpensive and you'll have alot less headache.

-------------------------------------------------------------------------------------------------------------------------

NOTE: As of Oct 2006, I'm not as active in this forum as I used to be, but I still work with osC quite a bit.

If you have a question about any of my posts here, your best bet is to contact me though either Email or PM in my profile, and I'll be happy to help.

Link to comment
Share on other sites

Thanks for your replies. I wouldn't object to paying $50 pa.

 

You mention a static IP though - does that mean I would need to host my own server? Or what is the IP for?

 

Would I be able to find a web host that would add it to my domain account? And if so, do you have any suggestions as to any hosts that would accommodate that?

 

Any additional info would be great. Thanks again.

Link to comment
Share on other sites

Any host should be able to sell you a static IP for your current account. They're usully no more than $2 per month. Just tell your host that you are going to purchase an SSL for your account. Then contact the vendor or the SSL (like instantssl.com or rapidssl.com) and let them know. I think your vendor will ask you to ask your host to generate a request, which is like a little block of text code that you can't read but the vendor needs to create the key. Then the vendor gets some information from you, and generates a key, which you give back to your host to install. In all, it shouldn't take more than an hour to get done, if you have a responsive host.

 

 

Thanks for your replies. I wouldn't object to paying $50 pa.

 

You mention a static IP though - does that mean I would need to host my own server? Or what is the IP for?

 

Would I be able to find a web host that would add it to my domain account? And if so, do you have any suggestions as to any hosts that would accommodate that?

 

Any additional info would be great. Thanks again.

-------------------------------------------------------------------------------------------------------------------------

NOTE: As of Oct 2006, I'm not as active in this forum as I used to be, but I still work with osC quite a bit.

If you have a question about any of my posts here, your best bet is to contact me though either Email or PM in my profile, and I'll be happy to help.

Link to comment
Share on other sites

Anytime you have one of those cheap shared SSLs from your host that give you a folder on a different server than the rest of your account, I'd say you are asking for trouble.

 

I'd suggest purchasing your own SSL from rapidssl.com or instantssl.com afor $50 per year, and having your host install it. You will need to purchase a static IP, but they are inexpensive and you'll have alot less headache.

 

I paid alot more than $50 for my shared SSL, guess I was ripped off. Can anyone else help with shared SSL setup, pleeeeeeeaase!!!!

Link to comment
Share on other sites

I paid alot more than $50 for my shared SSL, guess I was ripped off. Can anyone else help with shared SSL setup, pleeeeeeeaase!!!!

 

Yup, you sure did. Shared SSLs are almost always free.

-------------------------------------------------------------------------------------------------------------------------

NOTE: As of Oct 2006, I'm not as active in this forum as I used to be, but I still work with osC quite a bit.

If you have a question about any of my posts here, your best bet is to contact me though either Email or PM in my profile, and I'll be happy to help.

Link to comment
Share on other sites

Shared SSL was included in my account but I'd rather pay for something that works.... I have asked my host whether they can give me a fixed IP.

 

However, what about this as an option:

 

At the moment with SSL set to true in my configuration.php it looks towards the SSL server for everything from logging in to starting an order.

 

Is there a way to leave the login and everything unsecure and then simply pass to the SSL server when a customer gets to the credit card entering stage - similar to the way they would when using a 3rd party payment gateway such as Worldpay...

 

Does anyone know of a contribution or solution that would do that? I've looked but can't find one.

 

My thinking is that if it's just a small part of the OScommerce system that requires SSL, there are less chances it will go wrong and less files to update to make sure it works... any comments appreciated.

 

PS. If you're thinking "why not just use Worldpay?" - I already have credit card processing facilities and would prefer not to have the extra cost and administration of another system.

Link to comment
Share on other sites

Is there a way to leave the login and everything unsecure and then simply pass to the SSL server when a customer gets to the credit card entering stage - similar to the way they would when using a 3rd party payment gateway such as Worldpay...

 

sure, just let me know what URL it is....so i can make sure never to visit.

 

Seriously, you really need to encrypt put any page in which you collect customers information with SSL. Specifically, the account creation, and payment method pages.

 

From what I understand, it is very difficult to get the cart to work when you have a shared SSL that's on a different server than your cart. it can be done, but it probably isn't worth the hastle. At $50 per year, getting your own SSL is pretty affordable, it provides more protection to your customers, and it'll gie you few headaches.

-------------------------------------------------------------------------------------------------------------------------

NOTE: As of Oct 2006, I'm not as active in this forum as I used to be, but I still work with osC quite a bit.

If you have a question about any of my posts here, your best bet is to contact me though either Email or PM in my profile, and I'll be happy to help.

Link to comment
Share on other sites

Okay - situation so far - Gary signed up with Fasthosts - David signed up with Streamline and paid extra for use of the shared ssl - which is exactly the same shared ssl because Streamline resell Fasthosts space and use the same shared ssl. So the problem is the same.

 

Unfortunately, unless my e-mail to David resolved his problem (doesn't look like it did), then the answer is still the same. The Fasthosts shared ssl does not work with osCommerce.

 

Further problem - Fatshosts charge ?45 a year for 10Mbs of shared ssl space - and I don't believe they even offer dedicated ip addresses and full ssl cert installation.

 

Vger

Link to comment
Share on other sites

sure, just let me know what URL it is....so i can make sure never to visit.

 

Seriously, you really need to encrypt put any page in which you collect customers information with SSL. Specifically, the account creation, and payment method pages.

 

 

You're right it wasn't the best idea I've ever had - I told you I was near to pulling hair....! :blink:

 

I must thank everyone for their input - it is much appreciated. It seems that, fundamentally, Fasthosts is not suitable for OSc. It's just a shame that all their sales people and many of their support people are adamant that it is.

 

I also hope that this topic is a help to the [seemingly] many other people that have fallen into this trap... or may have done in the future.

 

I have been recommended to a host that should offer what I need so as soon as I have had confirmation and experience that proves it I will let you all know.

 

BTW, FH do say that if you upgrade to their dedicated servers the problems go away. I should hope so for the amount they cost...!

 

Gary.

Link to comment
Share on other sites

Just to clarify here, this particular problem does not indicate that fasthost is not suitable for OSCommerce. This indicates that fasthost's FREE SHARED SSL is not suitable for OSCOmmerce. If you get your own SSL, which cost about $50 per year, you wont have these problems. Personally, anyone serious about starting a business should be getting their own SSL anyways, to make sure their customers have the utmost protection.

-------------------------------------------------------------------------------------------------------------------------

NOTE: As of Oct 2006, I'm not as active in this forum as I used to be, but I still work with osC quite a bit.

If you have a question about any of my posts here, your best bet is to contact me though either Email or PM in my profile, and I'll be happy to help.

Link to comment
Share on other sites

Just to clarify here, this particular problem does not indicate that fasthost is not suitable for OSCommerce. This indicates that fasthost's FREE SHARED SSL is not suitable for OSCOmmerce. If you get your own SSL, which cost about $50 per year, you wont have these problems. Personally, anyone serious about starting a business should be getting their own SSL anyways, to make sure their customers have the utmost protection.

 

Actually, although I feel like a real Rodney (plonker) that I didn't check out the SSL from streamline.net, I do have the feeling that I have been ripped off.

 

On there services page they have prices for all the add ons on top of the hosting packages they do.

 

http://www.streamline.net/wh.php

 

They specify there SSL secure server for a price of ?50, and mention nothing of it being a shared one, so I assumed it was not shared and that it would be on my own domain. How wrong I was. :(

 

I am asking them at the moment if I can get my own SSL for my domain, so they can install it. But why do I get a feeling in the pit of my stomach that this isnt going to work either. Not good, when you have lost faith in your web host.

Link to comment
Share on other sites

Just heard back from my webhost. Yes guys and gals, you guessed it...

 

'Unfortunately it isn't possible to use a SSL certificate on your own domain.' :'(

 

:(

 

I am considering leaving them now, even though I have spent rather alot of money with them now. This is the second host I have used and have had problems with.

 

Does anyone know of a really good web host. Doesn't have to be in the UK but would be preferable as I can get support responses during the day. I need alot of webhost space and bandwidth (this was my reason for going with Streamline in the first place!), but now I also need them to allow you to use your own SSL certificate on your domain. Also, nice friendly user support would be nice (i.e. more than one, non-cryptic, sentence would be nice!).

 

Comments peops?

Link to comment
Share on other sites

Just heard back from my webhost. Yes guys and gals, you guessed it...

 

'Unfortunately it isn't possible to use a SSL certificate on your own domain.'  :'(

 

:(

 

I am considering leaving them now, even though I have spent rather alot of money with them now. This is the second host I have used and have had problems with.

 

Does anyone know of a really good web host. Doesn't have to be in the UK but would be preferable as I can get support responses during the day. I need alot of webhost space and bandwidth (this was my reason for going with Streamline in the first place!), but now I also need them to allow you to use your own SSL certificate on your domain. Also, nice friendly user support would be nice (i.e. more than one, non-cryptic, sentence would be nice!).

 

Comments peops?

 

For me I found it easy to go with a hosting provider that does a one click install on oscommerce, it saves the problems of uploading loads of files and guarantees it will work.

I will not suggest one, but you can PM for my hosting provider if you want.

There are loads out there...... some that are preloaded with the common contributions (guess that saves a few days of hard sweat)

 

Best Regards

Sean

 

btw: I use a shared SSL on my account and it works great on my hosting provider !

Link to comment
Share on other sites

Just to clarify here, this particular problem does not indicate that fasthost is not suitable for OSCommerce. This indicates that fasthost's FREE SHARED SSL is not suitable for OSCOmmerce.

 

Yes that is true, however in most cases OScommerce without SSL is not going to be much use, and Fasthosts can not provide a fixed IP for installation of your own SSL certificate unless you use one of their dedicated servers...

 

That's why I came to the conclusion that they're not suitable - unless you're able/prepared to pay ?50+ per month (which I'm neither able nor prepared to do).

 

Gary.

Link to comment
Share on other sites

Yes, if they can not sell you a dedicated IP, then I ageee, they are not suitable for OSCommerce.

-------------------------------------------------------------------------------------------------------------------------

NOTE: As of Oct 2006, I'm not as active in this forum as I used to be, but I still work with osC quite a bit.

If you have a question about any of my posts here, your best bet is to contact me though either Email or PM in my profile, and I'll be happy to help.

Link to comment
Share on other sites

  • 7 months later...

1. Fasthosts do not allow people to have full ssl certs on their domain.

2. The Fasthosts shared ssl does not work with osCommerce.

3. They charge for shared ssl.

4. Streamline are resellers of Fasthosts, but have branched out with a few facilities of their own which are not provided by Fasthosts.

 

Vger

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...