###Forced Cookie not working###

[Guest]

I turned on force cookies in the oscommerce back office cause i dont want the sessionID in the URL and I dont want search engines spidering the sessionID. I am getting the "cookie_usage.php" error page when being prompted to login to my store, saying i dont have cookies turned on in my browser which is false, they are turned on. If you goto to the site now i have disabled cookies for now till i get it working.

 

I have a dedicated SSL, and that is working just fine. I'm on a shared server and these are some of my settings. What am I doing wrong?

 

######################

configure.php

######################

 

 

define('HTTP_SERVER', 'http://www.sparklingcards.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://www.sparklingcards.com'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'www.sparklingcards.com');

define('HTTPS_COOKIE_DOMAIN', 'www.sparklingcards.com');

define('HTTP_COOKIE_PATH', '/shar');

define('HTTPS_COOKIE_PATH', '/shar');

 

define('USE_PCONNECT', 'true'); // use persistent connections?

define('STORE_SESSIONS', 'mysql'); // leave empty '' for default handler or set to 'mysql'

 

 

######################

Back Office Admin

######################

 

Session Directory = /tmp

Force Cookie Use = false (disabled temporarily)

Check SSL Session ID = True

Check User Agent = True

Check IP Address = True

Prevent Spider Sessions = True

Recreate Session = True

[FalseDawn]

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', '.sparklingcards.com');

define('HTTPS_COOKIE_DOMAIN', '.sparklingcards.com');

define('HTTP_COOKIE_PATH', '/catalog');

define('HTTPS_COOKIE_PATH', '/catalog');

 

/catalog might have to be "/catalog/" or "catalog/" - never can remember exactly.

 

Store would be better off being moved to root folder anyway.

[♥Vger]

This question about this site has been answered at least twice to my knowledge.

 

1. You have a problem with your template and every page shows a javascript error.

2. The http and https cookie domains start with www. (your cert is fine - nothing wrong with it)

3. You have a problem in that you are not getting a padlock - your https pages are rendered as http pages.

 

It doesn't matter how many times you ask the question the answer will be the same until you sort out the problems with your site.

 

Vger