SSL help

December 29, 2005

So here is the deal... I am running OsCommerce on a Windows hosting account with http://www.ixwebhosting.com IxWebhosting. I have enabled ssl check out, and now I can access the site on the ssl side of things, but all the subsuquient links are refering back to the non secure side of our server.

The Site is https://www.foresthomeoutfitters.org/catalog

Thanks in advance...

Billy Gedney

kgt · December 29, 2005

includes/configure.php:

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

and admin/includes/configure.php:

define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module

December 29, 2005

includes/configure.php:

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

and admin/includes/configure.php:

define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module

I did that... Its not working...

admin/includes/configure.php

/ define our webserver variables

// FS = Filesystem (physical)

// WS = Webserver (virtual)

define('HTTP_SERVER', 'http://foresthomeoutfitters.org'); // eg, http://localhost or - https://localhost should not be NULL for productive servers

define('HTTP_CATALOG_SERVER', 'http://foresthomeoutfitters.org/catalog/');

define('HTTPS_CATALOG_SERVER', 'https://foresthomeoutfitters.org/catalog/');

define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module

define('DIR_FS_DOCUMENT_ROOT', $DOCUMENT_ROOT); // where your pages are located on the server. if $DOCUMENT_ROOT doesnt suit you, replace with your local path. (eg, /usr/local/apache/htdocs)

define('DIR_WS_ADMIN', '/admin/');

define('DIR_FS_ADMIN', DIR_FS_DOCUMENT_ROOT . DIR_WS_ADMIN);

define('DIR_WS_CATALOG', '/catalog/');

define('DIR_FS_CATALOG', DIR_FS_DOCUMENT_ROOT . DIR_WS_CATALOG);

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_CATALOG_IMAGES', DIR_WS_CATALOG . 'images/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

define('DIR_WS_CATALOG_LANGUAGES', DIR_WS_CATALOG . 'includes/languages/');

define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');

define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');

define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');

define('DIR_FS_BACKUP', DIR_FS_ADMIN . '/backup/');

Includes/Configure.php:

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'http://www.foresthomeoutfitters.org/'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://foresthomeoutfitters.org/'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'foresthomeoutfitters.org');

define('HTTPS_COOKIE_DOMAIN', 'foresthomeoutfitters.org');

define('HTTP_COOKIE_PATH', '/catalog/');

define('HTTPS_COOKIE_PATH', '/catalog/');

define('DIR_WS_HTTP_CATALOG', '/catalog/');

define('DIR_WS_HTTPS_CATALOG', '/catalog/');

define('DIR_WS_IMAGES', '/catalog/images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

Am I missing something really stupid?

kgt · December 29, 2005

What happens if you change line 41 of includes/application_top.php to:

// set the type of request (secure or not)

$request_type = ($_SERVER['HTTPS'] == 'on') ? 'SSL' : 'NONSSL';

Also, what operating system and webserver are you using?

December 29, 2005

What happens if you change line 41 of includes/application_top.php to:

// set the type of request (secure or not)

$request_type = ($_SERVER['HTTPS'] == 'on') ? 'SSL' : 'NONSSL';

Also, what operating system and webserver are you using?

It reads this:

// set the type of request (secure or not)

$request_type = (getenv('HTTPS') == 'on') ? 'SSL' : 'SSL';

I think its IIS, but on windows.

kgt · December 29, 2005

Change it to what I posted. What happens if you do that?

December 29, 2005

I did. Still the same.

kgt · December 29, 2005

Try

$request_type = ($_SERVER['SERVER_PORT'] == 443) ? 'SSL' : 'NONSSL';

December 29, 2005

It still links back to the non secure side of things

December 29, 2005

I dont know if this means anything, But I was looking under the server info under tools.

Under Enviroment, there is that line for HTTPS, and it says off.

kgt · December 29, 2005

Create a file called info.php:

<?php phpinfo(INFO_VARIABLES); ?>

Upload it to your webserver, and get to it like:

https://foresthomeoutfitters.org/info.php

Make SURE you access it with the 'https'. Post the results.

December 29, 2005

PHP Variables

Variable Value

PHP_SELF /info.php

_SERVER["ALLUSERSPROFILE"] C:\\Documents and Settings\\All Users

_SERVER["CommonProgramFiles"] C:\\Program Files\\Common Files

_SERVER["COMPUTERNAME"] IIS16

_SERVER["ComSpec"] C:\\WINNT\\system32\\cmd.exe

_SERVER["CONTENT_LENGTH"] 0

_SERVER["GATEWAY_INTERFACE"] CGI/1.1

_SERVER["HTTPS"] on

_SERVER["HTTPS_KEYSIZE"] 128

_SERVER["HTTPS_SECRETKEYSIZE"] 1024

_SERVER["HTTPS_SERVER_ISSUER"] C=US, O=Equifax Secure Inc., CN=Equifax Secure Global eBusiness CA-1

_SERVER["HTTPS_SERVER_SUBJECT"] C=US, O=foresthomeoutfitters.org, OU=https://services.choicepoint.net/get.jsp?GT88352815, OU=See www.geotrust.com/resources/cps ©05, OU=Domain Control Validated - QuickSSL®, CN=foresthomeoutfitters.org

_SERVER["HTTP_ACCEPT"] */*

_SERVER["HTTP_ACCEPT_LANGUAGE"] en

_SERVER["HTTP_CONNECTION"] keep-alive

_SERVER["HTTP_HOST"] foresthomeoutfitters.org

_SERVER["HTTP_USER_AGENT"] Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/416.12 (KHTML, like Gecko) Safari/416.13

_SERVER["HTTP_ACCEPT_ENCODING"] gzip, deflate

_SERVER["HTTP_X_REWRITE_URL"] /info.php

_SERVER["INSTANCE_ID"] 408

_SERVER["LOCAL_ADDR"] 66.116.247.101

_SERVER["NUMBER_OF_PROCESSORS"] 1

_SERVER["Os2LibPath"] C:\\WINNT\\system32\\os2\\dll;

_SERVER["OS"] Windows_NT

_SERVER["Path"] C:\\Perl\\bin\\;C:\\WINNT\\system32;C:\\WINNT;C:\\WINNT\\System32\\Wbem;C:\\Program Files\\Microsoft SQL Server\\80\\Tools\\BINN

_SERVER["PATHEXT"] .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH

_SERVER["PATH_INFO"] /info.php

_SERVER["PATH_TRANSLATED"] D:\\hshome\\outfitte\\foresthomeoutfitters.org\\info.php

_SERVER["PROCESSOR_ARCHITECTURE"] x86

_SERVER["PROCESSOR_IDENTIFIER"] x86 Family 15 Model 2 Stepping 9, GenuineIntel

_SERVER["PROCESSOR_LEVEL"] 15

_SERVER["PROCESSOR_REVISION"] 0209

_SERVER["ProgramFiles"] C:\\Program Files

_SERVER["REMOTE_ADDR"] 12.158.68.14

_SERVER["REMOTE_HOST"] 12.158.68.14

_SERVER["REQUEST_METHOD"] GET

_SERVER["SCRIPT_NAME"] /info.php

_SERVER["SERVER_NAME"] foresthomeoutfitters.org

_SERVER["SERVER_PORT"] 443

_SERVER["SERVER_PORT_SECURE"] 1

_SERVER["SERVER_PROTOCOL"] HTTP/1.1

_SERVER["SERVER_SOFTWARE"] Microsoft-IIS/5.0

_SERVER["SystemDrive"] C:

_SERVER["SystemRoot"] C:\\WINNT

_SERVER["TEMP"] C:\\WINNT\\TEMP

_SERVER["TMP"] C:\\WINNT\\TEMP

_SERVER["USERPROFILE"] C:\\Documents and Settings\\ASPNET

_SERVER["windir"] C:\\WINNT

_SERVER["PHP_SELF"] /info.php

_SERVER["argv"]

Array

(

)

_SERVER["argc"] 0

_ENV["ALLUSERSPROFILE"] C:\\Documents and Settings\\All Users

_ENV["CommonProgramFiles"] C:\\Program Files\\Common Files

_ENV["COMPUTERNAME"] IIS16

_ENV["ComSpec"] C:\\WINNT\\system32\\cmd.exe

_ENV["CONTENT_LENGTH"] 0

_ENV["GATEWAY_INTERFACE"] CGI/1.1

_ENV["HTTPS"] on

_ENV["HTTPS_KEYSIZE"] 128

_ENV["HTTPS_SECRETKEYSIZE"] 1024

_ENV["HTTPS_SERVER_ISSUER"] C=US, O=Equifax Secure Inc., CN=Equifax Secure Global eBusiness CA-1

_ENV["HTTPS_SERVER_SUBJECT"] C=US, O=foresthomeoutfitters.org, OU=https://services.choicepoint.net/get.jsp?GT88352815, OU=See www.geotrust.com/resources/cps ©05, OU=Domain Control Validated - QuickSSL®, CN=foresthomeoutfitters.org

_ENV["HTTP_ACCEPT"] */*

_ENV["HTTP_ACCEPT_LANGUAGE"] en

_ENV["HTTP_CONNECTION"] keep-alive

_ENV["HTTP_HOST"] foresthomeoutfitters.org

_ENV["HTTP_USER_AGENT"] Mozilla/5.0 (Macintosh; U; PPC Mac OS X; en) AppleWebKit/416.12 (KHTML, like Gecko) Safari/416.13

_ENV["HTTP_ACCEPT_ENCODING"] gzip, deflate

_ENV["HTTP_X_REWRITE_URL"] /info.php

_ENV["INSTANCE_ID"] 408

_ENV["LOCAL_ADDR"] 66.116.247.101

_ENV["NUMBER_OF_PROCESSORS"] 1

_ENV["Os2LibPath"] C:\\WINNT\\system32\\os2\\dll;

_ENV["OS"] Windows_NT

_ENV["Path"] C:\\Perl\\bin\\;C:\\WINNT\\system32;C:\\WINNT;C:\\WINNT\\System32\\Wbem;C:\\Program Files\\Microsoft SQL Server\\80\\Tools\\BINN

_ENV["PATHEXT"] .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH

_ENV["PATH_INFO"] /info.php

_ENV["PATH_TRANSLATED"] D:\\hshome\\outfitte\\foresthomeoutfitters.org\\info.php

_ENV["PROCESSOR_ARCHITECTURE"] x86

_ENV["PROCESSOR_IDENTIFIER"] x86 Family 15 Model 2 Stepping 9, GenuineIntel

_ENV["PROCESSOR_LEVEL"] 15

_ENV["PROCESSOR_REVISION"] 0209

_ENV["ProgramFiles"] C:\\Program Files

_ENV["REMOTE_ADDR"] 12.158.68.14

_ENV["REMOTE_HOST"] 12.158.68.14

_ENV["REQUEST_METHOD"] GET

_ENV["SCRIPT_NAME"] /info.php

_ENV["SERVER_NAME"] foresthomeoutfitters.org

_ENV["SERVER_PORT"] 443

_ENV["SERVER_PORT_SECURE"] 1

_ENV["SERVER_PROTOCOL"] HTTP/1.1

_ENV["SERVER_SOFTWARE"] Microsoft-IIS/5.0

_ENV["SystemDrive"] C:

_ENV["SystemRoot"] C:\\WINNT

_ENV["TEMP"] C:\\WINNT\\TEMP

_ENV["TMP"] C:\\WINNT\\TEMP

_ENV["USERPROFILE"] C:\\Documents and Settings\\ASPNET

_ENV["windir"] C:\\WINNT

December 29, 2005

I am going to go take a quick lunch. Ill be back in like 40 minutes.

kgt · December 29, 2005

Line 45 in index.php, replace

<?php require(DIR_WS_INCLUDES . 'header.php'); ?>

with

<?php

var_dump( ENABLE_SSL );

var_dump( DIR_WS_CATALOG );

var_dump( DIR_WS_HTTPS_CATALOG );

require(DIR_WS_INCLUDES . 'header.php');

?>

Post the results of the top three lines. You'll get some text at the very top of the page.

kgt · December 29, 2005

Also, in includes/configure.php:

change

define('HTTP_SERVER', 'http://www.foresthomeoutfitters.org/'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://foresthomeoutfitters.org/'); // eg, https://localhost - should not be empty for productive servers

to

define('HTTP_SERVER', 'http://www.foresthomeoutfitters.org'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://foresthomeoutfitters.org'); // eg, https://localhost - should not be empty for productive servers

(no trailing slashes on domain names)

December 29, 2005

int(0) string(9) "/catalog/" string(9) "/catalog/"

Done.

kgt · December 30, 2005

Double check your includes/configure.php file. The first part - the part that reads int(0) - should read either int(1) or bool(true). This means ENABLE_SSL is not set to true.

December 30, 2005

I dont see that part.

<?php

/*

$Id: configure.php,v 1.4.2.5 2003/12/17 12:22:51 serg Exp $

osCommerce, Open Source E-Commerce Solutions

http://www.oscommerce.com

Released under the GNU General Public License

*/

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'http://www.foresthomeoutfitters.org'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://foresthomeoutfitters.org'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'foresthomeoutfitters.org');

define('HTTPS_COOKIE_DOMAIN', 'foresthomeoutfitters.org');

define('HTTP_COOKIE_PATH', '/catalog/');

define('HTTPS_COOKIE_PATH', '/catalog/');

define('DIR_WS_HTTP_CATALOG', '/catalog/');

define('DIR_WS_HTTPS_CATALOG', '/catalog/');

define('DIR_WS_IMAGES', '/catalog/images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');

define('DIR_FS_CATALOG', dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']));

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

// define our database connection

define('DB_SERVER', ''); // eg, localhost - should not be empty for productive servers

define('DB_SERVER_USERNAME', '');

define('DB_SERVER_PASSWORD', '');

define('DB_DATABASE', 'osCommerce');

define('USE_PCONNECT', 'false'); // use persistent connections?

define('STORE_SESSIONS', ''); // leave empty '' for default handler or set to 'mysql'

?>

kgt · December 30, 2005

Does the value int(0) at the very top change if you start trying to navigate around the site?

December 30, 2005

no

kgt · December 30, 2005

I'm stumped. Do a search within files for 'ENABLE_SSL' in your OSC directory. You can do this using a Windows search. It will require you to have a copy of the files on your harddrive.

December 30, 2005

Thanks anyways. Ill Try that.

December 30, 2005

For those of you sports fans, It was the /catalog/includes/local/configure.php

Change the 0 to a 1 next to enable_ssl

♥Vger · December 30, 2005

The correct answer is not to even upload the local folder, as it's for development work only.

Vger

SSL help

Recommended Posts

Guest

Link to comment

Share on other sites

Link to comment

Share on other sites

Guest

Link to comment

Share on other sites

Link to comment

Share on other sites

Guest

Link to comment

Share on other sites

Link to comment

Share on other sites

Guest

Link to comment

Share on other sites

Link to comment

Share on other sites

Guest

Link to comment

Share on other sites

Guest

Link to comment

Share on other sites

Link to comment

Share on other sites

Guest

Link to comment

Share on other sites

Guest

Link to comment

Share on other sites

Link to comment

Share on other sites

Link to comment

Share on other sites

Guest

Link to comment

Share on other sites

Link to comment

Share on other sites

Guest

Link to comment

Share on other sites

Link to comment

Share on other sites

Guest

Link to comment

Share on other sites

Link to comment

Share on other sites

Guest

Link to comment

Share on other sites

Guest

Link to comment

Share on other sites

Link to comment

Share on other sites

Archived