Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

Weird Behaviour In Admin


letmelearn

Recommended Posts

Hi there,

Hope someone can help me with this issue....

 

I have just loaded the SSL cert and protected the admin area just fine. (phew!)

 

Now when I click on any of the links in the Admin panel I stay at the admin panel!!? However if I manually type in say:

 

https://mysite.com/admin/configuration.php

 

Everything is fine.

 

Now I know why this is happening - it's because the links are http and not https. Can anyone point me to the correct file to change all the http to https in the admin panel?

 

Many Thanks

Link to comment
Share on other sites

I've got a bit further with this problem by reading the posts on SSL etc.

 

I have changed my catalog/includes/configure.php file to:

// Define the webserver and path parameters
// * DIR_FS_* = Filesystem directories (local/physical)
// * DIR_WS_* = Webserver directories (virtual/URL)
 define('HTTP_SERVER', 'http://www.mystore.com'); // eg, [url="http://localhost"]http://localhost[/url] - should not be empty for productive servers
 define('HTTPS_SERVER', 'https://mystore.com'); // eg, [url="https://localhost"]https://localhost[/url] - should not be empty for productive servers
 define('ENABLE_SSL', true); // secure webserver for checkout procedure?
 define('HTTP_COOKIE_DOMAIN', 'www.mystore.com');
 define('HTTPS_COOKIE_DOMAIN', 'mystore.com');
 define('HTTP_COOKIE_PATH', '/catalog/');
 define('HTTPS_COOKIE_PATH', '/catalog/');
 define('DIR_WS_HTTP_CATALOG', '/catalog/');
 define('DIR_WS_HTTPS_CATALOG', '/catalog/');

 

and admin/includes/configure.php file to:

// define our webserver variables
// FS = Filesystem (physical)
// WS = Webserver (virtual)
 define('HTTP_SERVER', 'https://www.mystore.com'); // eg, [url="http://localhost"]http://localhost[/url] or - [url="https://localhost"]https://localhost[/url] should not be NULL for productive servers
 define('HTTP_CATALOG_SERVER', 'http://www.mystore.com');
 define('HTTPS_CATALOG_SERVER', 'https://mystore.com');
 define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module

 

Is there anything else I need to change on either of these files or any other files?

 

Thanks

Link to comment
Share on other sites

I have found that if I remove this:

SSLRequireSSL

ErrorDocument 403 https://mysite.com/admin/

 

I get access to the admin panel, the password still works and all the links work.

When I click on links in the admin panel I get taken to the http pages not the https pages

AND

http://mysite.com/admin

is also available to anyone (although it is password protected)

 

 

Can anyone offer any suggestions.....please?

 

Been looking on this forum for about 7hours now

 

Thanks hopefully.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...