Problem with shared SSL cerificate

[Guest]

Hi

Im sharing a certificate at my webbhotel and i got this code from them:

 

 

define('HTTP_SERVER', 'http://www.flamingoshop.se'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://zeus.oderland.com/~flamopse'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'www.flamingoshop.se');

define('HTTPS_COOKIE_DOMAIN', 'www.flamingoshop');

define('HTTP_COOKIE_PATH', '/');

define('HTTPS_COOKIE_PATH', '/');

 

The problem is that im losing everything in the basket whjen going to checkout. It also seems to having problem to keep track if your logged on or not. I think that it have somthing to do with the cookiesettings.

 

Anyone knows what to change in the code?

 

Have a nice evening!

[kgt]

It does. Your HTTPS cookie settings should match the HTTPS domain:

 

define('HTTPS_COOKIE_DOMAIN', 'zeus.oderland.com');

define('HTTPS_COOKIE_PATH', '/~flamopse/');

[Guest]

Hi

Thanks for the reply. Now I have changed to the code below but I still have the same problem. The pages protected by the ssl cant find the cooike that are set in the no https pages. The shopping is done on pages not protected by ssl and there the coocie is populated. When i go to the checkout prosidure the pages from in https cant find the cookie.

 

Am i right?

 

Well here is the code im using now. Any more suggestions?

 

define('HTTP_SERVER', 'http://www.flamingoshop.se');

define('HTTPS_SERVER', 'https://zeus.oderland.com/~flamopse');

define('ENABLE_SSL', true);

define('HTTP_COOKIE_DOMAIN', 'www.flamingoshop.se');

define('HTTPS_COOKIE_DOMAIN', 'zeus.oderland.com');

define('HTTP_COOKIE_PATH', '/');

define('HTTPS_COOKIE_PATH', '/~flamopse/');

 

 

Have an nice day

[kgt]

Make sure you have Force Cookie Use set to false in your admin configuration section. (In the Configuration > Sessions section.)

[Guest]

That made it work! Thanks.

 

But now the: osCsid=fd9e4cf8b0692da1b2651ea681f02a41

 

is displayed in the URL

 

I remembered I read some backsides of that. Anyone remember?

 

One last question: If I get my own certificate - will I be able set "Forece cookies" to true.

 

Guys - thanks for al the help!

[♥Vger]

Yes, if you get your own full SSL Certificate you can set Force Cookie Use to True.

 

In the meantime make sure that 'Prevent Spider Sessions' is set to True.

 

Vger

[Guest]

Oki I Will. Whats "Prevent spider Session"? What does it do