SSL certificate and Placing OsCommerce files in secure folder

[Guest]

Hi

 

I have purchased a full SSL certificate for my website and it has been installed by my web hosting company. According to my web hosting company any files I want to secure need to be placed in a root folder called secure on the web server. So currently my file structure for my store is public/catalog this secure folder resides at the same level as the public one.

 

Two questions:

 

1. I want to secure account login, create an account and all the checkout pages, which OsCommerce files exactly do I need to copy into the secure folder for the SSL certificate to work on these pages and I presume I need to maintain the folder structure of catalog/includes/languages/english within the secure folder as well? I have tried already the above folder structure with all the files I listed above placed in the english folder and standard configuration for https secure access in the configure.php but when I test it I get page cannot be found. The address at the top of the page looks ok, https://www.mycompany.com/account.php when I try account login, so I am thinking I may need some other support files uploaded in the cesure folder or my configure php.file is not set up properly.

 

2. Is there anything special I need to do to the configure.php file? This is currently how I have it configured.

 

define('HTTP_SERVER', 'http://www.mycompany.ca'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER''https://www.mycompany.ca''); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', 'true'); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'www.mycompany.ca');

define('HTTPS_COOKIE_DOMAIN', 'https://www.mycompany.ca');

define('HTTP_COOKIE_PATH', '/catalog/');

define('HTTPS_COOKIE_PATH', '/secure/catalog/');

define('DIR_WS_HTTP_CATALOG', '/catalog/');

define('DIR_WS_HTTPS_CATALOG', '/secure/catalog/'');

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

Looking at this I am not sure if I need the secure before the catalog or if I should have ../ before the secure.

 

Thanks

[Jack_mcs]

Your host is wrong about the secure folder, unless they have some obsure way of doing things. Just change the following

define('HTTPS_COOKIE_PATH', '/secure/catalog/');
define('DIR_WS_HTTPS_CATALOG', '/secure/catalog/'');

to

define('HTTPS_COOKIE_PATH', '/catalog/');
define('DIR_WS_HTTPS_CATALOG', '/catalog/'');

and let oscommerce do the rest.

 

Jack

[Guest]

Yes unfortunately they do have an obscure way of doing things, I had tried with the standard starts just https:// and it did not work. I have been using osCommerce:Professional Edition for building this site and it did state that some servers will require that you move everything to a secure folder and if they do make sure the correct paths are set, but I am not having any luck and I am getting the pages to go the https://www.mystorename.com/secure/catalog

 

So I just want to ensure it has been configured correctly, so any help would be great.

 

Your host is wrong about the secure folder, unless they have some obsure way of doing things. Just change the following

define('HTTPS_COOKIE_PATH', '/secure/catalog/');
define('DIR_WS_HTTPS_CATALOG', '/secure/catalog/'');

to

define('HTTPS_COOKIE_PATH', '/catalog/');
define('DIR_WS_HTTPS_CATALOG', '/catalog/'');

and let oscommerce do the rest.

 

Jack