Configuring the SSL host.

[Guest]

Where do I configure the SSL Host?

 

 

THanks

Nima

[jpweber]

includes/configure.php

 

admin/includes/configure.php

[Guest]

Which lines should I change?

 

I tried changing some of them but my store is still not secure.

 

Also my Login/Signup links dont work . Why?

 

Thanks

Nima

[jpweber]

How to get your site secure (with httpS:// and a padlock):

(1) Tell your host that you want SSL installed, and that you'll get it on your own. Personally, I stay away from Shared SSL's. Get your own. They'll charge you money, and offer you a CSR (certificate signing request) code in your e-mail.

 

* At this point, make sure you know -- and they know -- if the SSL is going to be put on http://yoursite.com, or http://www.yoursite.com -- make sure both the host and the SSL company are on the same page.

 

(2) Go to an SSL company such as ev1servers.net or networksolutions.com -- just do a google search for SSL companies. The rapidSSL product is like 15 bucks, and some people like that. The QuickSSL is like 50 bucks. Some guys say to go cheap, but my personal opinion is that you get what you pay for. I wouldn't do a 15 dollar SSL. Tell this SSL company you want their SSL. E-mail them the CSR, and they will charge you. Buy the SSL, and they will send you the SSL Certificate key.

 

* Things I'd look out for: Make sure the SSL is compatible with all browsers, offers at least 129 bit data encryption, and puts a padlock in your browser.

 

(3) Take the SSL Certificate Key, and return it to your host. Your host will then install it for you.

 

(4) Then all you need to do is adjust your OSC includes/configure.php file, and admin/includes/configure.php file. Then when you point to pages that require data input, such as create-account, login, checkout, etc., you will see httpS:// instead of http://, meaning the page is secured.

 

(5) Congifure.php files: if your site is in your root directory and assigned to http://www.yoursite.com, includes/configure.php will look something like this:

define('HTTP_SERVER', 'http://www.yoursite.com');

define('HTTPS_SERVER', 'https://wwww.yoursite.com');

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'www.yoursite.com');

define('HTTPS_COOKIE_DOMAIN', 'www.yoursite.com');

define('HTTP_COOKIE_PATH', '/');

define('HTTPS_COOKIE_PATH', '/');

define('DIR_WS_HTTP_CATALOG', '/');

define('DIR_WS_HTTPS_CATALOG', '/');

 

(6) Admin/includes/configure.php:

define('HTTP_SERVER', 'https://www.thevisiondepot.com/');

define('HTTP_CATALOG_SERVER', 'https://www.thevisiondepot.com/');

define('HTTPS_CATALOG_SERVER', 'https://www.thevisiondepot.com/');

define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module

 

This is how you do the entire SSL thing, which, in my estimation, is mandatory. Good luck.