Site Security Problems 128 bit

[firbest]

Hi

 

I am currently having problems as i have just bought the security certificate and have changed my admin/includes/ configure.php

 

to

 

define('HTTP_SERVER', 'https://www.falconsat.co.uk'); // eg, http://localhost - should not be empty for productive servers

define('HTTP_CATALOG_SERVER', 'https://www.falconsat.co.uk');

define('HTTPS_CATALOG_SERVER', 'https://www.falconsat.co.uk');

define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module

define('DIR_FS_DOCUMENT_ROOT', '/kunden/homepages/41/d152592497/htdocs/falconsat/'); // where the pages are located on the server

define('DIR_WS_ADMIN', '/admin/'); // absolute path required

define('DIR_FS_ADMIN', '/kunden/homepages/41/d152592497/htdocs/falconsat/admin/'); // absolute pate required

define('DIR_WS_CATALOG', '/'); // absolute path required

define('DIR_FS_CATALOG', '/kunden/homepages/41/d152592497/htdocs/falconsat/'); // absolute path required

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_CATALOG_IMAGES', DIR_WS_CATALOG . 'images/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

define('DIR_WS_CATALOG_LANGUAGES', DIR_WS_CATALOG . 'includes/languages/');

define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');

define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');

define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');

define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');

 

and

 

includes/configure.php

 

define('HTTP_SERVER', 'https://www.falconsat.co.uk'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://www.falconsat.co.uk/'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'www.falconsat.co.uk');

define('HTTPS_COOKIE_DOMAIN', '');

define('HTTP_COOKIE_PATH', '/');

define('HTTPS_COOKIE_PATH', '');

define('DIR_WS_HTTP_CATALOG', '/');

define('DIR_WS_HTTPS_CATALOG', '');

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');

define('DIR_FS_CATALOG', '/kunden/homepages/41/d152592497/htdocs/falconsat');

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

and now the whole site is secured but i only when pages like payment page to be secured and not all. I hope someone can help me

[kgt]

You changed your server name to https. For the HTTP_ settings, use http. For the HTTPS_ settings, use https.

[firbest]

You changed your server name to https. For the HTTP_ settings, use http. For the HTTPS_ settings, use https.

 

Thank you but when i do that ad go to any https page all the product images come as unsecured.

[kgt]

Thank you but when i do that ad go to any https page all the product images come as unsecured.

 

 

Why do your product images need to be secured?

 

If you're speaking of having insecured images served when you're on the checkout page, that's a result of hardcoding links, not configuration settings.

[firbest]

Why do your product images need to be secured?

 

If you're speaking of having insecured images served when you're on the checkout page, that's a result of hardcoding links, not configuration settings.

 

The main problem i am having is that when a customer is inputing his/her credit card details its not showing the secured pad lock therefore too many complaints. Is it possible to make it show that the page is secured. As i have just change the codes as requested please feel free to visit the webiste www.falconsat.co.uk to see the effect that it not secured when customer is inputing their credit card details.

 

I hope there is a way to make it secured.

[kgt]

Ah. Now we get to the true problem.

 

What are your current configuration settings? Did you change them from the file you displayed below?

[firbest]

Ah. Now we get to the true problem.

 

What are your current configuration settings? Did you change them from the file you displayed below?

 

in my admin/includes/ configure.php

 

define('HTTP_SERVER', 'http://www.falconsat.co.uk'); // eg, http://localhost - should not be empty for productive servers

define('HTTP_CATALOG_SERVER', 'https://www.falconsat.co.uk');

define('HTTPS_CATALOG_SERVER', 'https://www.falconsat.co.uk');

define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module

define('DIR_FS_DOCUMENT_ROOT', '/kunden/homepages/41/d152592497/htdocs/falconsat/'); // where the pages are located on the server

define('DIR_WS_ADMIN', '/admin/'); // absolute path required

define('DIR_FS_ADMIN', '/kunden/homepages/41/d152592497/htdocs/falconsat/admin/'); // absolute pate required

define('DIR_WS_CATALOG', '/'); // absolute path required

define('DIR_FS_CATALOG', '/kunden/homepages/41/d152592497/htdocs/falconsat/'); // absolute path required

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_CATALOG_IMAGES', DIR_WS_CATALOG . 'images/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

define('DIR_WS_CATALOG_LANGUAGES', DIR_WS_CATALOG . 'includes/languages/');

define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');

define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');

define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');

define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');

 

and for includes/configure.php

 

define('HTTP_SERVER', 'http://www.falconsat.co.uk'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://www.falconsat.co.uk/'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'www.falconsat.co.uk');

define('HTTPS_COOKIE_DOMAIN', '');

define('HTTP_COOKIE_PATH', '/');

define('HTTPS_COOKIE_PATH', '');

define('DIR_WS_HTTP_CATALOG', '/');

define('DIR_WS_HTTPS_CATALOG', '');

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');

define('DIR_FS_CATALOG', '/kunden/homepages/41/d152592497/htdocs/falconsat');

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

i just changed the define('HTTP_SERVER', bit in both files as requested

[kgt]

Okay, it looks like you have either PHP as CGI or you have a server that's not registering the HTTPS server variable. Lines 40-41 of includes/application_top.php:

 

change this:

// set the type of request (secure or not)
 $request_type = (getenv('HTTPS') == 'on') ? 'SSL' : 'NONSSL';

 

to this:

// set the type of request (secure or not)
//  $request_type = (getenv('HTTPS') == 'on') ? 'SSL' : 'NONSSL';
 $request_type = ($_SERVER["HTTPS"] == 'on') ? 'SSL' : 'NONSSL';

 

if that doesn't work, try this:

 

// set the type of request (secure or not)
//  $request_type = (getenv('HTTPS') == 'on') ? 'SSL' : 'NONSSL';
 $request_type = ($_SERVER["SERVER_PORT"] == '443') ? 'SSL' : 'NONSSL';

 

If neither of those work, go to this page:

 

https://www.falconsat.co.uk/admin/server_info.php

 

and search for "HTTPS" and report the values you can find.

[firbest]

a BIG thanks to you for all the help you have given as it works now. :)