Cookies and SSL not working

[Gidgidonihah]

Ok I have a shared certificate for the time being at least on my site located at www.buyldsproducts.com. At the moment I have force cookie usage off because I couldn't get it to work, but I would REALLY like to.

 

I finally figured out and installed the ssl on my site, but when I did so, when trying to log on it takes me to the cookie usage page. For some reason cookies aren't working with SSL. If I turn the SSL off, everything works fine. I can't figure out what the problem is. I've searched the forums and as far as I can see, I have configure.php set up correctly, and I haven't seen much else that can help. If anyone could be of assistance I would REALLY appreciate it.

 

For reference, here is my configure.php:

  define('HTTP_SERVER', 'http://www.buyldsproducts.com'); // eg, http://localhost - should not be empty for productive servers
 define('HTTPS_SERVER', 'https://unix11.vizaweb.com/~rata291/buylds'); // eg, https://localhost - should not be empty for productive servers
 define('ENABLE_SSL', true); // secure webserver for checkout procedure?
 define('HTTP_COOKIE_DOMAIN', 'buyldsproducts.com');
 define('HTTPS_COOKIE_DOMAIN', 'unix11.vizaweb.com/~rata291/buylds');
 define('HTTP_COOKIE_PATH', '/');
 define('HTTPS_COOKIE_PATH', '/');
 define('DIR_WS_HTTP_CATALOG', '/');
 define('DIR_WS_HTTPS_CATALOG', '/');

[Guest]

you can not use 'force cookie' in the admin/configuration area

[Gidgidonihah]

you can not use 'force cookie' in the admin/configuration area

<{POST_SNAPBACK}>

 

 

Okay, I didn't quite understand what you meant by that. Could you explain a little better what you mean?

[AlanR]

Okay, I didn't quite understand what you meant by that.  Could you explain a little better what you mean?

<{POST_SNAPBACK}>

 

You can't use force cookies when you're running a shared ssl like you are. No cookie can be set in the secure sections (the ssl ones) you don't own the certificate. The session id will be carried in the address bar when the shop is in ssl. Once a user switches back into regular catalog area the session id is carried in a cookie and the session id disappears from the address line.

 

Bottom line?

 

force cookie usage = cookie usage page when you use shared ssl.

[Gidgidonihah]

Ah. Okay, that makes sense. Thanks a ton!