Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

How to fix... you are entering an unsecure and secure area...


ttorq

Recommended Posts

1. The 'unsecure content' is your logo;

 

2. you whole site is using https which is not necessary or wrong in a sense. You only need to use https for the account/checkout pages.

 

Ken

commercial support - unProtected channel, not to be confused with the forum with same name - open to everyone who need some professional help: either PM/email me, or go to my website (URL can be found in my profile).

over 20 years of computer programming experience.

Link to comment
Share on other sites

Your product info page is secure and your add to cart button link is not. This is why.

Other great Open Source (Free) programs: (Free as in free speech not free beer)

The Gimp - An image program. | Firefox - All you have to do is add the Web Developer add-on to make this web browser complete. | FileZilla - An ftp program. | Inkscape - A good program to create images with. | Thunderbird - An email program. | Openoffice.org - An office suite that is compatible with MS Office. | Abiword - Another office suite. | Audacity - A sound recording tool. | ddp's Picks | Wordpress - An easy to use blogging software. | Joomla - An easy to use CMS that has ecommerce plug-ins. | Drupal - Another CMS

How do I find these programs? Google Search!

Link to comment
Share on other sites

1. The 'unsecure content' is your logo;

 

2. you whole site is using https which is not necessary or wrong in a sense. You only need to use https for the account/checkout pages.

 

Ken

 

Hi Ken,

 

To clarify, do I need to change all of the files back to "http" that are not part of the shopping cart? How do I know what files are part of the "account/checkout pages" ?

 

Thanks for your help,

 

Terri

Link to comment
Share on other sites

For a default osc setup, only thing you need to do is set up the configure.php correctly, and osc will take care the rest, ie, it is able to know which page should use https and which should not.

 

But if yours is not a default/stock osc, ie, you ues a template which changes the default settings, or you manually changed the files/code yourself, then the matter is more complicated. You will need to un-do all these back to that of the default osc.

 

Ken

commercial support - unProtected channel, not to be confused with the forum with same name - open to everyone who need some professional help: either PM/email me, or go to my website (URL can be found in my profile).

over 20 years of computer programming experience.

Link to comment
Share on other sites

For a default osc setup, only thing you need to do is set up the configure.php correctly, and osc will take care the rest, ie, it is able to know which page should use https and which should not.

 

But if yours is not a default/stock osc, ie, you use a template which changes the default settings, or you manually changed the files/code yourself, then the matter is more complicated. You will need to un-do all these back to that of the default osc.

 

Ken

 

My original configure.php file is the same. I didn't change it at all. I know that the enable SSL is marked "true" also. So now what do I do? Should I undo all of my files I changed by hand? Or should I re-install the original catalog files again?

Link to comment
Share on other sites

My original configure.php file is the same. I didn't change it at all. I know that the enable SSL is marked "true" also. So now what do I do? Should I undo all of my files I changed by hand? Or should I re-install the original catalog files again?

Without knowing what changes youve made to the files, its difficult for me to say what exctally you need to do. What I could advise is that you could compare all the files start with the word 'checkout' and/or with the word 'account' or 'address' in the filename with a stock osc download. login.php is also one the pages that need to use https.

 

Ken

commercial support - unProtected channel, not to be confused with the forum with same name - open to everyone who need some professional help: either PM/email me, or go to my website (URL can be found in my profile).

over 20 years of computer programming experience.

Link to comment
Share on other sites

Without knowing what changes youve made to the files, its difficult for me to say what exctally you need to do. What I could advise is that you could compare all the files start with the word 'checkout' and/or with the word 'account' or 'address' in the filename with a stock osc download. login.php is also one the pages that need to use https.

 

Ken

 

Hey Ken,

 

I just spent some time and redid all of the files back to http. BUT now I get an error that says..

 

Warning: session_start(): Cannot send session cookie - headers already sent by (output started at /home/content/j/t/o/jtorquato/html/catalog/includes/application_top.php:2) in /home/content/j/t/o/jtorquato/html/catalog/includes/functions/sessions.php on line 97

 

And the pages are all messed up now. Do you know to fix this?

Terri

Link to comment
Share on other sites

Hey Ken,

 

I just spent some time and redid all of the files back to http. BUT now I get an error that says..

 

Warning: session_start(): Cannot send session cookie - headers already sent by (output started at /home/content/j/t/o/jtorquato/html/catalog/includes/application_top.php:2) in /home/content/j/t/o/jtorquato/html/catalog/includes/functions/sessions.php on line 97

 

And the pages are all messed up now. Do you know to fix this?

Terri

 

I also can't access the shopping cart too. oh oh. :(

Link to comment
Share on other sites

I didnt tell you to do the changes. I suggested you to compare the file s with those from a osc stock download, to see if you could spot any difference. And if you are unsure, you'd post it here i am sure someone will be able to help you as yours is not a very difficult problem.

But now it seems youve made it worse, so reverse back using your backup for the time being. If you do not understand very well how osc works, then perhaps you'd ask someone who has experience to actually take a look at your site. Its not something difficult for an experienced osc-er.

 

Ken

commercial support - unProtected channel, not to be confused with the forum with same name - open to everyone who need some professional help: either PM/email me, or go to my website (URL can be found in my profile).

over 20 years of computer programming experience.

Link to comment
Share on other sites

I didnt tell you to do the changes. I suggested you to compare the file s with those from a osc stock download, to see if you could spot any difference. And if you are unsure, you'd post it here i am sure someone will be able to help you as yours is not a very difficult problem.

But now it seems youve made it worse, so reverse back using your backup for the time being. If you do not understand very well how osc works, then perhaps you'd ask someone who has experience to actually take a look at your site. Its not something difficult for an experienced osc-er.

 

Ken

 

Ken,

 

Thanks. I have no idea how to fix it. I have no back up files to reverse it with. Is there somewhere I can undo everything I have done? OR should I re-install the catalog new again?

sorry.. Terri

Link to comment
Share on other sites

Ken,

 

Thanks. I have no idea how to fix it. I have no back up files to reverse it with. Is there somewhere I can undo everything I have done? OR should I re-install the catalog new again?

sorry.. Terri

 

 

Hey again Ken,

 

I did have some back up files so reloaded them and now I am OK again. Thanks for your help.

Terri

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...