SSL Problem with my stylesheet

[ryankself]

So, my catalog is up and seems to work, minus the fact that it isn't secure.

http://myaromatica.com/catalog is all fine and good, but when you go to https://myaromatica.com/catalog, the page is not secure. I have narrowed it down to the stylesheet, because https://myaromatica.com/catalog/index1.php is the exact same file minus the stylesheet line, and that page comes up as secure. If I change my stylesheet code from <link rel="stylesheet" type="text/css" href="stylesheet.css"> to <link rel="stylesheet" type="text/css" href="default.css"> (default.css doesn't exist, by the way), the page also comes up as partially encrypted.

 

Anyway, why is the page partially encrypted when the stylesheet is in the myaromatica.com domain and doesn't download any images at all, and why is the page partially encrypted when it links to a css file that doesn't exist, yet is encrypted when it isn't linked to any stylesheet at all?

 

The site itself uses css and is encrypted (https://myaromatica.com), but the catalog isn't, and they're set up with css the same way.

 

As you can probably imagine, I'm a bit frustrated and any help would be most appreciated.

[kgt]

None of your images are https either. The reason is the base href is listed as http. So any relative elements (css and images) are resolved to the insecure URL.

 

Post the contents of includes/configure.php. BE SURE TO REMOVE the database information at the bottom of the file.

[ryankself]

Sweet, here we go. I REALLY appreciate the help!

 

 

/*

osCommerce, Open Source E-Commerce Solutions

http://www.oscommerce.com

 

Copyright © 2003 osCommerce

 

Released under the GNU General Public License

*/

 

 

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'http://www.myaromatica.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://myaromatica.com'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'www.myaromatica.com');

define('HTTPS_COOKIE_DOMAIN', 'myaromatica.com');

define('HTTP_COOKIE_PATH', '/catalog/');

define('HTTPS_COOKIE_PATH', '/catalog/');

define('DIR_WS_HTTP_CATALOG', '/catalog/');

define('DIR_WS_HTTPS_CATALOG', '/catalog/');

 

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

[AlanR]

https://myaromatica.com/catalog/create_account.php?

 

<base href="http://www.myaromatica.com/catalog/">

 

See:

 

http://www.oscommerce.com/forums/index.php?sho...23entry672623

http://www.oscommerce.com/forums/index.php?sho...88entry713688

http://www.oscommerce.com/forums/index.php?sho...09entry748409

[ryankself]

You kick butt, dude. Thanks so much, the thing seems to be working now. I only got the 443 code, so I changed line 41 to:

 

$request_type = (getenv('SERVER_PORT') == '443') ? 'SSL' : 'NONSSL';

 

and that seems to have made all of the difference. I don't seem to be getting any unexpected popups or whatever, like your later post mentioned, but I'll keep your other info in mind just in case.

Thanks again for the help. Is this a GoDaddy thing? I'm noticing an issue with security with them as well where I can't select folders and categories to put password restrictions in through the godaddy interface which other people seem to be able to do no sweat.

 

Xie Xie,

[Guest]

You kick butt, dude. Thanks so much, the thing seems to be working now. I only got the 443 code, so I changed line 41 to:

 

$request_type = (getenv('SERVER_PORT') == '443') ? 'SSL' : 'NONSSL';

 

and that seems to have made all of the difference. I don't seem to be getting any unexpected popups or whatever, like your later post mentioned, but I'll keep your other info in mind just in case.

Thanks again for the help. Is this a GoDaddy thing? I'm noticing an issue with security with them as well where I can't select folders and categories to put password restrictions in through the godaddy interface which other people seem to be able to do no sweat.

 

Xie Xie,

 

Is the subject of this thread the reason my stuff looks weird? Here is my thread:

 

http://www.oscommerce.com/forums/index.php?showtopic=203316

 

I also have a godaddy certificate and the images arent showing up right! My Store page looks awful!