Why the SSL padlock flashes?

[liz0]

I installed 1and1 dedicated ssl and modified scripts as I learned from the forum. But right now whenever I go to pages such as account, the padlock only flashes for one second then it's gone. The URL is "https" though.

 

I fixed the following:

 

in includes/application_top.php

 

change

 
$request_type = (getenv('HTTPS') == '1') ? 'SSL' : 'NONSSL';

 

to

  $request_type = (eregi ($HTTP_HOST, HTTPS_SERVER)) ? 'NONSSL' : 'SSL';

 

in functions/general.php

change

if ( (ENABLE_SSL == true) && (getenv('HTTPS') == 'on') )

to

if ( (ENABLE_SSL == true) && (getenv('HTTPS') == '1') )

 

also change "on" to "1" to /admin/index.php

 

BTW, the admin also said I'm not protected by ssl.

 

Any ideas?

 

Thanks!

Liz

[AlanR]

That eregi hack is bogus. It's results depend on too many other variables which you probably don't understand.

 

I'm guessing its shared ssl. Read this carefully:

 

http://www.oscommerce.com/forums/index.php?sho...23entry672623

 

then this:

 

http://www.oscommerce.com/forums/index.php?sho...09entry748409

[liz0]

That eregi hack is bogus. It's results depend on too many other variables which you probably don't understand.

 

I'm guessing its shared ssl. Read this carefully:

 

http://www.oscommerce.com/forums/index.php?sho...23entry672623

 

then this:

 

http://www.oscommerce.com/forums/index.php?sho...09entry748409

 

Hi AlanR,

 

Thank you for your response. But mine is not a share SSL. It is a dedicated SSL with Geotrust from 1and1. SO what should be done differently? Thank you very much!

 

-Liz

[AlanR]

Hi AlanR,

 

Thank you for your response. But mine is not a share SSL. It is a dedicated SSL with Geotrust from 1and1. SO what should be done differently? Thank you very much!

 

-Liz

If you can't get it to work with a setting of "1" then most likely you have mixed content in your page. You're hard linking a http image or something similar.

[liz0]

If you can't get it to work with a setting of "1" then most likely you have mixed content in your page. You're hard linking a http image or something similar.

 

I didn't see this kind of content though. :( Could you please take a look my site for me?

 

http://www.crystalmood.com

 

Thank you!

[AlanR]

From source of https://www.crystalmood.com/login.php

 

<base href="http://www.crystalmood.com/">

 

You don't have the setting in application_top.php correct.

[liz0]

From source of https://www.crystalmood.com/login.php

 

<base href="http://www.crystalmood.com/">

 

You don't have the setting in application_top.php correct.

 

I found the problem! It's the stupic skype status that I put in the footer - it made ssl kept saying there's non secure content. Once I removed it, eveything is working! So you are right about the mixed content!

 

The base href thing was because I tried all kinds of options and non of them seem to be working, so I left one there without noticing which one it is...

 

Thank you AlanR.