Could someone help please?

[Nathali]

Hi,

 

I installed SSL. and I have some problems..

 

First it is possible to access to my https://www.xxxx.co.il domain and it shouldn't be like that no?

 

I modified the configure.php files (admin configure also) to SSL true.

 

when I enter to create_account.php page the page is not secure with SSL ? also other pages that should be secured are not.. ??

 

could someone advise me please what to do to solve it ??

 

regards,

nathali

[Guest]

Hi,

 

I installed SSL. and I have some problems..

 

First it is possible to access to my https://www.xxxx.co.il domain and it shouldn't be like that no?

 

I modified the configure.php files (admin configure also) to SSL true.

 

when I enter to create_account.php page the page is not secure with SSL ? also other pages that should be secured are not.. ??

 

could someone advise me please what to do to solve it ??

 

regards,

nathali

 

You could look here: http://www.oscommerce.com/forums/index.php?showtopic=233458

osc takes care of which pages need it.

[Nathali]

You could look here: http://www.oscommerce.com/forums/index.php?showtopic=233458

osc takes care of which pages need it.

 

Hi Coopco,

 

Thanks for your reply.

 

I already used that info. to apply the SSL, But I still don't get the secured pages for the create_account.php page and for the rest pages that should be secured with the SSL ??

 

Could someone advise me please what more should I need to modified ??

 

Thanks and regards,

Nathali

[♥FWR Media]

First it is possible to access to my https://www.xxxx.co.il domain and it shouldn't be like that no?

 

No that's fine you should be able to access any oscommerce page via https://

 

The configure.php must be wrong ..

  define('HTTPS_SERVER', 'https://www.MYSITE.co.il');
 define('ENABLE_SSL', true);
 define('HTTP_COOKIE_DOMAIN', '.MYSITE.co.il');
 define('HTTPS_COOKIE_DOMAIN', '.MYSITE.co.il');

[♥FWR Media]

If that doesn't work.

 

Access your shop index page via https (https://www.MYSITE.co.il)

 

View the page source and look for ...

 

<base href="

 

Report here what the full line is.

[Nathali]

If that doesn't work.

 

Access your shop index page via https (https://www.MYSITE.co.il)

 

View the page source and look for ...

 

<base href="

 

Report here what the full line is.

 

Thanks a lot for your reply !

 

it is: <base href="https://www.xxxxxx.co.il/">

 

I do not see the images and the icon correct ?!

 

What you advise please?

[♥toyicebear]

some possible "sinners" wich might cause the create_account.php page to show http:

 

- If you type in the address to create_account.php in your browser using http , then it will just be http

 

- If you have hardcoded some links and the link goes to http , then it will also still be just http

[♥FWR Media]

I think we need a link to the shop as the base href is fine.

[Nathali]

I think we need a link to the shop as the base href is fine.

 

here it is..

 

<base href="https://www.pcmemory.co.il/">

 

thanks for the help !

[♥FWR Media]

Hmm works perfectly for me.

 

If I click My Account it changes to https and redirects me to login as it should.

 

I click create account and it is still https.

 

I don't see a problem tbh.

[Nathali]

Hmm works perfectly for me.

 

If I click My Account it changes to https and redirects me to login as it should.

 

I click create account and it is still https.

 

I don't see a problem tbh.

 

How it possible??

 

you are saying that you enter to http//www.pcmemory.co.il

 

Then you use creat account link and it comes as secured page with the lock key ...??

 

strange. I use explorer 7 and I don't get it correct at all !!

 

Do you think I have a problem in my windows software ?? I get from time to time error in the explorer and it says that it should be close or If I want to report this error to microsoft..

 

what please should I do then ?

[germ]

What Nick (toyicebear) said earlier is happening.

 

When I go to your create_account page, I get the "Do you want to display non-secure items?"

 

If I say NO, the page stays HTTPS (SECURE)

 

If I say YES, the page goes HTTP (NON-SCURE)

 

Many times when this happens, things like images disappear so it's easy to see what's "non-secure".

 

In your case, that doesn't happen, and I can't tell from my end what's making it jump "non secure".

:blush:

[Nathali]

What Nick (toyicebear) said earlier is happening.

 

When I go to your create_account page, I get the "Do you want to display non-secure items?"

 

If I say NO, the page stays HTTPS (SECURE)

 

If I say YES, the page goes HTTP (NON-SCURE)

 

Many times when this happens, things like images disappear so it's easy to see what's "non-secure".

 

In your case, that doesn't happen, and I can't tell from my end what's making it jump "non secure".

:blush:

 

Thanks Germ for your reply !

 

Here is my create_account.php page in the root directory..

 

If you could help me please I will be glad. Thanks.

 

<?php

/*

$Id: create_account.php,v 1.65 2003/06/09 23:03:54 hpdl Exp $

 

osCommerce, Open Source E-Commerce Solutions

http://www.oscommerce.com

 

Copyright © 2003 osCommerce

 

Released under the GNU General Public License

*/

 

require('includes/application_top.php');

 

// needs to be included earlier to set the success message in the messageStack

require(DIR_WS_LANGUAGES . $language . '/' . FILENAME_CREATE_ACCOUNT);

function random_string($length) {

$thestring = "";

// define possible characters

$possible = "0123456789bcdfghjkmnpqrstvwxyz";

// add random characters to $password until $length is reached

$i = 0;

while ($i < $length) {

// pick a random character from the possible ones

$char = substr($possible, mt_rand(0, strlen($possible)-1), 1);

// we don't want this character if it's already in the password

if (!strstr($thestring, $char)) {

$thestring .= $char;

$i++;

}

}

return $thestring;

}

//-MS- Active Countries

$country = (isset($HTTP_POST_VARS['country']))?tep_db_prepare_input($HTTP_POST_VARS['country']):((int)STORE_COUNTRY);

$country_flag = (isset($HTTP_POST_VARS['country_old']) && ($country != $HTTP_POST_VARS['country_old']))?true:false;

//-MS- Active Countries EOM

$process = false;

if (isset($HTTP_POST_VARS['action']) && ($HTTP_POST_VARS['action'] == 'process')) {

$process = true;

 

if (ACCOUNT_GENDER == 'true') {

if (isset($HTTP_POST_VARS['gender'])) {

$gender = tep_db_prepare_input($HTTP_POST_VARS['gender']);

} else {

$gender = false;

}

}

$firstname = tep_db_prepare_input($HTTP_POST_VARS['firstname']);

$lastname = tep_db_prepare_input($HTTP_POST_VARS['lastname']);

if (ACCOUNT_DOB == 'true') $dob = tep_db_prepare_input($HTTP_POST_VARS['dob']);

$email_address = tep_db_prepare_input($HTTP_POST_VARS['email_address']);

$confirm_email_address = tep_db_prepare_input($HTTP_POST_VARS['confirm_email_address']);

 

 

if (ACCOUNT_COMPANY == 'true') $company = tep_db_prepare_input($HTTP_POST_VARS['company']);

$street_address = tep_db_prepare_input($HTTP_POST_VARS['street_address']);

if (ACCOUNT_SUBURB == 'true') $suburb = tep_db_prepare_input($HTTP_POST_VARS['suburb']);

$postcode = tep_db_prepare_input($HTTP_POST_VARS['postcode']);

$city = tep_db_prepare_input($HTTP_POST_VARS['city']);

if (ACCOUNT_STATE == 'true') {

$state = tep_db_prepare_input($HTTP_POST_VARS['state']);

if (isset($HTTP_POST_VARS['zone_id'])) {

$zone_id = tep_db_prepare_input($HTTP_POST_VARS['zone_id']);

} else {

$zone_id = false;

}

}

 

$telephone = tep_db_prepare_input($HTTP_POST_VARS['telephone']);

$fax = tep_db_prepare_input($HTTP_POST_VARS['fax']);

if (isset($HTTP_POST_VARS['newsletter'])) {

$newsletter = tep_db_prepare_input($HTTP_POST_VARS['newsletter']);

} else {

$newsletter = false;

}

$password = tep_db_prepare_input($HTTP_POST_VARS['password']);

$confirmation = tep_db_prepare_input($HTTP_POST_VARS['confirmation']);

 

$error = false;

 

if (ACCOUNT_GENDER == 'true') {

if ( ($gender != 'm') && ($gender != 'f') ) {

$error = true;

 

$messageStack->add('create_account', ENTRY_GENDER_ERROR);

}

}

 

if (strlen($firstname) < ENTRY_FIRST_NAME_MIN_LENGTH) {

$error = true;

 

$messageStack->add('create_account', ENTRY_FIRST_NAME_ERROR);

}

 

if (strlen($lastname) < ENTRY_LAST_NAME_MIN_LENGTH) {

$error = true;

 

$messageStack->add('create_account', ENTRY_LAST_NAME_ERROR);

}

 

if (ACCOUNT_DOB == 'true') {

if (checkdate(substr(tep_date_raw($dob), 4, 2), substr(tep_date_raw($dob), 6, 2), substr(tep_date_raw($dob), 0, 4)) == false) {

$error = true;

 

$messageStack->add('create_account', ENTRY_DATE_OF_BIRTH_ERROR);

}

}

 

if (strlen($email_address) < ENTRY_EMAIL_ADDRESS_MIN_LENGTH) {

$error = true;

 

$messageStack->add('create_account', ENTRY_EMAIL_ADDRESS_ERROR);

} elseif (tep_validate_email($email_address) == false) {

$error = true;

 

$messageStack->add('create_account', ENTRY_EMAIL_ADDRESS_CHECK_ERROR);

} else {

$check_email_query = tep_db_query("select count(*) as total from " . TABLE_CUSTOMERS . " where customers_email_address = '" . tep_db_input($email_address) . "'");

$check_email = tep_db_fetch_array($check_email_query);

if ($check_email['total'] > 0) {

$error = true;

 

$messageStack->add('create_account', ENTRY_EMAIL_ADDRESS_ERROR_EXISTS);

}

}

 

if ($email_address != $confirm_email_address)

{

$error = true;

 

$messageStack->add('create_account', ENTRY_CONFIRM_EMAIL_ADDRESS_CHECK_ERROR);

}

 

 

if (strlen($street_address) < ENTRY_STREET_ADDRESS_MIN_LENGTH) {

$error = true;

 

$messageStack->add('create_account', ENTRY_STREET_ADDRESS_ERROR);

}

 

if (strlen($postcode) < ENTRY_POSTCODE_MIN_LENGTH) {

$error = true;

 

$messageStack->add('create_account', ENTRY_POST_CODE_ERROR);

}

 

if (strlen($city) < ENTRY_CITY_MIN_LENGTH) {

$error = true;

 

$messageStack->add('create_account', ENTRY_CITY_ERROR);

}

 

if (is_numeric($country) == false) {

$error = true;

 

$messageStack->add('create_account', ENTRY_COUNTRY_ERROR);

}

 

if (ACCOUNT_STATE == 'true') {

//-MS- Added Active Countries

$zone_id = 0;

if( $country_flag ) {

$zone_query = tep_db_query("select zone_id from " . TABLE_ZONES . " where zone_status='1' and zone_country_id = '" . (int)$country . "'");

if (tep_db_num_rows($zone_query) > 0) {

$entry_state_has_zones = true;

}

 

} else {

$zone_query = tep_db_query("select zone_id from " . TABLE_ZONES . " where zone_status='1' and zone_country_id = '" . (int)$country . "' and zone_id = '" . tep_db_input($state) . "'");

if (tep_db_num_rows($zone_query) == 1) {

$entry_state_has_zones = true;

$zone = tep_db_fetch_array($zone_query);

$zone_id = $zone['zone_id'];

} else {

$error = true;

$messageStack->add('create_account', ENTRY_STATE_ERROR_SELECT);

}

}

//-MS- Added Active Countries EOM

}

 

if (strlen($telephone) < ENTRY_TELEPHONE_MIN_LENGTH) {

$error = true;

 

$messageStack->add('create_account', ENTRY_TELEPHONE_NUMBER_ERROR);

}

 

 

if (strlen($password) < ENTRY_PASSWORD_MIN_LENGTH) {

$error = true;

 

$messageStack->add('create_account', ENTRY_PASSWORD_ERROR);

} elseif ($password != $confirmation) {

$error = true;

 

$messageStack->add('create_account', ENTRY_PASSWORD_ERROR_NOT_MATCHING);

}

 

if( !$error && !$country_flag) {

$sql_data_array = array('customers_firstname' => $firstname,

'customers_lastname' => $lastname,

'customers_email_address' => $email_address,

'customers_telephone' => $telephone,

'customers_fax' => $fax,

'customers_newsletter' => $newsletter,

'customers_password' => tep_encrypt_password($password));

 

if (ACCOUNT_GENDER == 'true') $sql_data_array['customers_gender'] = $gender;

if (ACCOUNT_DOB == 'true') $sql_data_array['customers_dob'] = tep_date_raw($dob);

if (ACTIVATION_CODE == 'off') {

$sql_data_array['customers_activation_code'] = '';

$sql_data_array['customers_active_status'] = '1';

} else {

$activation_code = random_string(12);

$sql_data_array['customers_activation_code'] = $activation_code;

$sql_data_array['customers_active_status'] = '0';

}

tep_db_perform(TABLE_CUSTOMERS, $sql_data_array);

 

$customer_id = tep_db_insert_id();

 

$sql_data_array = array('customers_id' => $customer_id,

'entry_firstname' => $firstname,

'entry_lastname' => $lastname,

'entry_street_address' => $street_address,

'entry_postcode' => $postcode,

'entry_city' => $city,

'entry_country_id' => $country);

 

if (ACCOUNT_GENDER == 'true') $sql_data_array['entry_gender'] = $gender;

if (ACCOUNT_COMPANY == 'true') $sql_data_array['entry_company'] = $company;

if (ACCOUNT_SUBURB == 'true') $sql_data_array['entry_suburb'] = $suburb;

if (ACCOUNT_STATE == 'true') {

if ($zone_id > 0) {

$sql_data_array['entry_zone_id'] = $zone_id;

$sql_data_array['entry_state'] = '';

} else {

$sql_data_array['entry_zone_id'] = '0';

$sql_data_array['entry_state'] = $state;

}

}

 

tep_db_perform(TABLE_ADDRESS_BOOK, $sql_data_array);

 

$address_id = tep_db_insert_id();

 

tep_db_query("update " . TABLE_CUSTOMERS . " set customers_default_address_id = '" . (int)$address_id . "' where customers_id = '" . (int)$customer_id . "'");

 

tep_db_query("insert into " . TABLE_CUSTOMERS_INFO . " (customers_info_id, customers_info_number_of_logons, customers_info_date_account_created) values ('" . (int)$customer_id . "', '0', now())");

 

if (SESSION_RECREATE == 'True') {

tep_session_recreate();

}

if (ACTIVATION_CODE == 'off') {

$customer_first_name = $firstname;

$customer_default_address_id = $address_id;

$customer_country_id = $country;

$customer_zone_id = $zone_id;

tep_session_register('customer_id');

tep_session_register('customer_first_name');

tep_session_register('customer_default_address_id');

tep_session_register('customer_country_id');

tep_session_register('customer_zone_id');

}

// restore cart contents

$cart->restore_contents();

 

// BEGIN SEND HTML MAIL//

 

$name = $firstname . " " . $lastname;

$Varlogo = ' '.VARLOGO.' ' ;

 

$Vartable1 = ' '.VARTABLE1.' ' ;

$Vartable2 = ' '.VARTABLE2.' ' ;

$Vartextmail = EMAILWELCOME . EMAILTEXT . EMAILCONTACT . EMAILWARNING;

$Vartrcolor = ' '. TRCOLOR . ' ' ;

$Varmailfooter = ' ' . EMAIL_TEXT_FOOTER . ' <br><br> ' ;

 

if (ACCOUNT_GENDER == 'true') {

if ($HTTP_POST_VARS['gender'] == 'm') {

$Vargendertext = EMAILGREET_MR;

} else {

$Vargendertext = EMAILGREET_MS;

}

} else {

$Vargendertext = EMAILGREET_NONE;

}

 

 

require(DIR_WS_MODULES . 'email/html_create_account.php');

$email_text = $html_email_text ;

 

if (EMAIL_USE_HTML == 'true') {

 

$email_text;

 

}

 

else

 

{

 

if (ACCOUNT_GENDER == 'true') {

if ($HTTP_POST_VARS['gender'] == 'm') {

$email_text = EMAILGREET_MR;

} else {

$email_text = EMAILGREET_MS;

}

} else {

$email_text = EMAILGREET_NONE;

}

 

$email_text .= EMAILWELCOME . "\n\n" . EMAILTEXT ."\n\n" . EMAILCONTACT .

EMAIL_TEXT_FOOTER . "\n\n\n" .

EMAIL_SEPARATOR . "\n" .

EMAILWARNING . "\n\n" ;

$email_text .= HTTP_SERVER . DIR_WS_CATALOG . "\n" .

EMAIL_TEXT_FOOTERR . "\n" ;

 

}

 

 

//END SEND HTML EMAIL//

if (ACTIVATION_CODE == 'off') {

// $email_text .= EMAIL_WELCOME . EMAIL_TEXT . EMAIL_CONTACT . EMAIL_WARNING;

tep_mail($name, $email_address, EMAIL_SUBJECT, $email_text, STORE_OWNER, STORE_OWNER_EMAIL_ADDRESS);

tep_redirect(tep_href_link(FILENAME_CREATE_ACCOUNT_SUCCESS, '', 'SSL'));

} else {

$activation_id = md5($email_address);

$verification_href = tep_href_link(FILENAME_ACCOUNT_ACTIVATE, 'activation_id=' . $activation_id, 'SSL');

$verification_mail = tep_href_link(FILENAME_ACCOUNT_ACTIVATE, 'activation_id=' . $activation_id . '&activation_code=' . $activation_code, 'SSL');

$verification_link = '<a href="' . $verification_mail . '">' . $verification_mail . '</a>' ."\n\n";

$activation_text = EMAIL_TEXT_ACTIVATION;

// $email_text .= EMAIL_WELCOME . EMAIL_TEXT . $activation_text . $verification_link . EMAIL_CONTACT . EMAIL_WARNING;

$email_text .= $activation_text . $verification_link . EMAIL_WARNING;

tep_mail($name, $email_address, EMAIL_SUBJECT, $email_text, STORE_OWNER, STORE_OWNER_EMAIL_ADDRESS);

tep_redirect($verification_href);

}

}

}

 

$breadcrumb->add(NAVBAR_TITLE, tep_href_link(FILENAME_CREATE_ACCOUNT, '', 'SSL'));

?>

<!doctype html public "-//W3C//DTD HTML 4.01 Transitional//EN">

<html <?php echo HTML_PARAMS; ?>>

<head>

<meta http-equiv="Content-Type" content="text/html; charset=<?php echo CHARSET; ?>">

<title><?php echo TITLE; ?></title>

<base href="<?php echo (($request_type == 'SSL') ? HTTPS_SERVER : HTTP_SERVER) . DIR_WS_CATALOG; ?>">

<link rel="stylesheet" type="text/css" href="stylesheet.css">

<?php require('includes/form_check.js.php'); ?>

</head>

<body marginwidth="0" marginheight="0" topmargin="0" bottommargin="0" leftmargin="0" rightmargin="0">

<!-- header //-->

<?php require(DIR_WS_INCLUDES . 'header.php'); ?>

<!-- header_eof //-->

 

<!-- body //-->

<table border="0" width="100%" cellspacing="3" cellpadding="3">

<tr>

<td width="<?php echo BOX_WIDTH; ?>" valign="top"><table border="0" width="<?php echo BOX_WIDTH; ?>" cellspacing="0" cellpadding="2">

<!-- left_navigation //-->

<?php require(DIR_WS_INCLUDES . 'column_left.php'); ?>

<!-- left_navigation_eof //-->

</table></td>

<!-- body_text //-->

<td width="100%" valign="top"><?php echo tep_draw_form('create_account', tep_href_link(FILENAME_CREATE_ACCOUNT, '', 'SSL'), 'post', 'onSubmit="return check_form(create_account);"') . tep_draw_hidden_field('action', 'process'); ?><table border="0" width="100%" cellspacing="0" cellpadding="0">

<tr>

<td><table border="0" width="100%" cellspacing="0" cellpadding="0">

<tr>

<td class="pageHeading"><?php echo HEADING_TITLE; ?></td>

<td class="pageHeading" align="right"><?php echo tep_image(DIR_WS_IMAGES . 'table_background_account.gif', HEADING_TITLE, HEADING_IMAGE_WIDTH, HEADING_IMAGE_HEIGHT); ?></td>

</tr>

</table></td>

</tr>

<tr>

<td><?php echo tep_draw_separator('pixel_trans.gif', '100%', '10'); ?></td>

</tr>

<tr>

<td class="smallText"><br><?php echo sprintf(TEXT_ORIGIN_LOGIN, tep_href_link(FILENAME_LOGIN, tep_get_all_get_params(), 'SSL')); ?></td>

</tr>

<tr>

<td><?php echo tep_draw_separator('pixel_trans.gif', '100%', '10'); ?></td>

</tr>

<?php

if( $messageStack->size('create_account') > 0 && !$country_flag ) {

?>

<tr>

<td><?php echo $messageStack->output('create_account'); ?></td>

</tr>

<tr>

<td><?php echo tep_draw_separator('pixel_trans.gif', '100%', '10'); ?></td>

</tr>

<?php

}

?>

<tr>

<td><table border="0" width="100%" cellspacing="0" cellpadding="2">

<tr>

<td class="main"><b><?php echo CATEGORY_PERSONAL; ?></b></td>

<td class="inputRequirement" align="right"><?php echo FORM_REQUIRED_INFORMATION; ?></td>

</tr>

</table></td>

</tr>

<tr>

<td><table border="0" width="100%" cellspacing="1" cellpadding="2" class="infoBox">

<tr class="infoBoxContents">

<td><table border="0" cellspacing="2" cellpadding="2">

<?php

if (ACCOUNT_GENDER == 'true') {

?>

<tr>

<td class="main"><?php echo ENTRY_GENDER; ?></td>

<td class="main"><?php echo tep_draw_radio_field('gender', 'm') . '  ' . MALE . '  ' . tep_draw_radio_field('gender', 'f') . '  ' . FEMALE . ' ' . (tep_not_null(ENTRY_GENDER_TEXT) ? '<span class="inputRequirement">' . ENTRY_GENDER_TEXT . '</span>': ''); ?></td>

</tr>

<?php

}

?>

<tr>

<td class="main"><?php echo ENTRY_FIRST_NAME; ?></td>

<td class="main"><?php echo tep_draw_input_field('firstname') . ' ' . (tep_not_null(ENTRY_FIRST_NAME_TEXT) ? '<span class="inputRequirement">' . ENTRY_FIRST_NAME_TEXT . '</span>': ''); ?></td>

</tr>

<tr>

<td class="main"><?php echo ENTRY_LAST_NAME; ?></td>

<td class="main"><?php echo tep_draw_input_field('lastname') . ' ' . (tep_not_null(ENTRY_LAST_NAME_TEXT) ? '<span class="inputRequirement">' . ENTRY_LAST_NAME_TEXT . '</span>': ''); ?></td>

</tr>

<?php

if (ACCOUNT_DOB == 'true') {

?>

<tr>

<td class="main"><?php echo ENTRY_DATE_OF_BIRTH; ?></td>

<td class="main"><?php echo tep_draw_input_field('dob') . ' ' . (tep_not_null(ENTRY_DATE_OF_BIRTH_TEXT) ? '<span class="inputRequirement">' . ENTRY_DATE_OF_BIRTH_TEXT . '</span>': ''); ?></td>

</tr>

<?php

}

?>

<tr>

<td class="main"><?php echo ENTRY_EMAIL_ADDRESS; ?></td>

<td class="main"><?php echo tep_draw_input_field('email_address') . ' ' . (tep_not_null(ENTRY_EMAIL_ADDRESS_TEXT) ? '<span class="inputRequirement">' . ENTRY_EMAIL_ADDRESS_TEXT . '</span>': ''); ?></td>

</tr>

<tr>

<td class="main"><?php echo ENTRY_CONFIRM_EMAIL_ADDRESS; ?></td>

<td class="main"><?php echo tep_draw_input_field('confirm_email_address') . ' ' . (tep_not_null(ENTRY_EMAIL_ADDRESS_TEXT) ? '<span class="inputRequirement">' . ENTRY_EMAIL_ADDRESS_TEXT . '</span>': ''); ?></td>

</tr>

</table></td>

</tr>

</table></td>

</tr>

<?php

if (ACCOUNT_COMPANY == 'true') {

?>

<tr>

<td><?php echo tep_draw_separator('pixel_trans.gif', '100%', '10'); ?></td>

</tr>

<tr>

<td class="main"><b><?php echo CATEGORY_COMPANY; ?></b></td>

</tr>

<tr>

<td><table border="0" width="100%" cellspacing="1" cellpadding="2" class="infoBox">

<tr class="infoBoxContents">

<td><table border="0" cellspacing="2" cellpadding="2">

<tr>

<td class="main"><?php echo ENTRY_COMPANY; ?></td>

<td class="main"><?php echo tep_draw_input_field('company') . ' ' . (tep_not_null(ENTRY_COMPANY_TEXT) ? '<span class="inputRequirement">' . ENTRY_COMPANY_TEXT . '</span>': ''); ?></td>

</tr>

</table></td>

</tr>

</table></td>

</tr>

<?php

}

?>

<tr>

<td><?php echo tep_draw_separator('pixel_trans.gif', '100%', '10'); ?></td>

</tr>

<tr>

<td class="main"><b><?php echo CATEGORY_ADDRESS; ?></b></td>

</tr>

<tr>

<td><table border="0" width="100%" cellspacing="1" cellpadding="2" class="infoBox">

<tr class="infoBoxContents">

<td><table border="0" cellspacing="2" cellpadding="2">

<tr>

<td class="main"><?php echo ENTRY_STREET_ADDRESS; ?></td>

<td class="main"><?php echo tep_draw_input_field('street_address') . ' ' . (tep_not_null(ENTRY_STREET_ADDRESS_TEXT) ? '<span class="inputRequirement">' . ENTRY_STREET_ADDRESS_TEXT . '</span>': ''); ?></td>

</tr>

<?php

if (ACCOUNT_SUBURB == 'true') {

?>

<tr>

<td class="main"><?php echo ENTRY_SUBURB; ?></td>

<td class="main"><?php echo tep_draw_input_field('suburb') . ' ' . (tep_not_null(ENTRY_SUBURB_TEXT) ? '<span class="inputRequirement">' . ENTRY_SUBURB_TEXT . '</span>': ''); ?></td>

</tr>

<?php

}

?>

<tr>

<td class="main"><?php echo ENTRY_POST_CODE; ?></td>

<td class="main"><?php echo tep_draw_input_field('postcode') . ' ' . (tep_not_null(ENTRY_POST_CODE_TEXT) ? '<span class="inputRequirement">' . ENTRY_POST_CODE_TEXT . '</span>': ''); ?></td>

</tr>

<tr>

<td class="main"><?php echo ENTRY_CITY; ?></td>

<td class="main"><?php echo tep_draw_input_field('city') . ' ' . (tep_not_null(ENTRY_CITY_TEXT) ? '<span class="inputRequirement">' . ENTRY_CITY_TEXT . '</span>': ''); ?></td>

</tr>

<?php

if (ACCOUNT_STATE == 'true') {

?>

<tr>

<td class="main"><?php echo ENTRY_STATE; ?></td>

<td class="main">

<?php

//-MS- Added Active Countries

if ($process == true) {

if ($entry_state_has_zones == true) {

$zones_array = array();

$zones_array = array(array('id' => '', 'text' => PULL_DOWN_DEFAULT));

$zones_query = tep_db_query("select zone_id, zone_name from " . TABLE_ZONES . " where zone_status='1' and zone_country_id = '" . (int)$country . "' order by zone_name");

while ($zones_values = tep_db_fetch_array($zones_query)) {

$zones_array[] = array('id' => $zones_values['zone_id'], 'text' => $zones_values['zone_name']);

}

echo tep_draw_pull_down_menu('state', $zones_array);

} else {

$zones_array = array();

$zones_array = array(array('id' => '', 'text' => PULL_DOWN_DEFAULT));

$zones_query = tep_db_query("select zone_id, zone_name from " . TABLE_ZONES . " where zone_status='1' order by zone_name");

while ($zones_values = tep_db_fetch_array($zones_query)) {

$zones_array[] = array('id' => $zones_values['zone_id'], 'text' => $zones_values['zone_name']);

}

echo tep_draw_pull_down_menu('state', $zones_array);

}

} else {

$zones_array = array();

$zones_array = array(array('id' => '', 'text' => PULL_DOWN_DEFAULT));

$zones_query = tep_db_query("select zone_id, zone_name from " . TABLE_ZONES . " where zone_status='1' and zone_country_id = '" . (int)$country . "' order by zone_name");

while ($zones_values = tep_db_fetch_array($zones_query)) {

$zones_array[] = array('id' => $zones_values['zone_id'], 'text' => $zones_values['zone_name']);

}

echo tep_draw_pull_down_menu('state', $zones_array);

}

//-MS- Added Active Countries EOM

 

if (tep_not_null(ENTRY_STATE_TEXT)) echo ' <span class="inputRequirement">' . ENTRY_STATE_TEXT;

?>

</td>

</tr>

<?php

}

?>

<tr>

<td class="main"><?php echo ENTRY_COUNTRY; ?></td>

<td class="main"><b><?php echo ($tmp_object = tep_get_country_active_list('country', $country, 'onChange="this.form.submit();"')) . tep_draw_hidden_field('country_old', $country) . ' ' . (is_array($tmp_object) ? '<span class="inputRequirement">' . ENTRY_COUNTRY_TEXT . '</span>': ''); ?></b></td>

</tr>

</table></td>

</tr>

</table></td>

</tr>

<tr>

<td><?php echo tep_draw_separator('pixel_trans.gif', '100%', '10'); ?></td>

</tr>

<tr>

<td class="main"><b><?php echo CATEGORY_CONTACT; ?></b></td>

</tr>

<tr>

<td><table border="0" width="100%" cellspacing="1" cellpadding="2" class="infoBox">

<tr class="infoBoxContents">

<td><table border="0" cellspacing="2" cellpadding="2">

<tr>

<td class="main"><?php echo ENTRY_TELEPHONE_NUMBER; ?></td>

<td class="main"><?php echo tep_draw_input_field('telephone') . ' ' . (tep_not_null(ENTRY_TELEPHONE_NUMBER_TEXT) ? '<span class="inputRequirement">' . ENTRY_TELEPHONE_NUMBER_TEXT . '</span>': ''); ?></td>

</tr>

<tr>

<td class="main"><?php echo ENTRY_FAX_NUMBER; ?></td>

<td class="main"><?php echo tep_draw_input_field('fax') . ' ' . (tep_not_null(ENTRY_FAX_NUMBER_TEXT) ? '<span class="inputRequirement">' . ENTRY_FAX_NUMBER_TEXT . '</span>': ''); ?></td>

</tr>

</table></td>

</tr>

</table></td>

</tr>

<tr>

<td><?php echo tep_draw_separator('pixel_trans.gif', '100%', '10'); ?></td>

</tr>

<tr>

<td class="main"><b><?php echo CATEGORY_OPTIONS; ?></b></td>

</tr>

<tr>

<td><table border="0" width="100%" cellspacing="1" cellpadding="2" class="infoBox">

<tr class="infoBoxContents">

<td><table border="0" cellspacing="2" cellpadding="2">

<tr>

<td class="main"><?php echo ENTRY_NEWSLETTER; ?></td>

<td class="main"><?php echo tep_draw_checkbox_field('newsletter', '1', $checked = true) . ' ' . (tep_not_null(ENTRY_NEWSLETTER_TEXT) ? '<span class="inputRequirement">' . ENTRY_NEWSLETTER_TEXT . '</span>': ''); ?></td>

</tr>

</table></td>

</tr>

</table></td>

</tr>

<tr>

<td><?php echo tep_draw_separator('pixel_trans.gif', '100%', '10'); ?></td>

</tr>

<tr>

<td class="main"><b><?php echo CATEGORY_PASSWORD; ?></b></td>

</tr>

<tr>

<td><table border="0" width="100%" cellspacing="1" cellpadding="2" class="infoBox">

<tr class="infoBoxContents">

<td><table border="0" cellspacing="2" cellpadding="2">

<tr>

<td class="main"><?php echo ENTRY_PASSWORD; ?></td>

<td class="main"><?php echo tep_draw_password_field('password') . ' ' . (tep_not_null(ENTRY_PASSWORD_TEXT) ? '<span class="inputRequirement">' . ENTRY_PASSWORD_TEXT . '</span>': ''); ?></td>

</tr>

<tr>

<td class="main"><?php echo ENTRY_PASSWORD_CONFIRMATION; ?></td>

<td class="main"><?php echo tep_draw_password_field('confirmation') . ' ' . (tep_not_null(ENTRY_PASSWORD_CONFIRMATION_TEXT) ? '<span class="inputRequirement">' . ENTRY_PASSWORD_CONFIRMATION_TEXT . '</span>': ''); ?></td>

</tr>

</table></td>

</tr>

</table></td>

</tr>

<tr>

<td><?php echo tep_draw_separator('pixel_trans.gif', '100%', '10'); ?></td>

</tr>

<tr>

<td><table border="0" width="100%" cellspacing="1" cellpadding="2" class="infoBox">

<tr class="infoBoxContents">

<td><table border="0" width="100%" cellspacing="0" cellpadding="2">

<tr>

<td width="10"><?php echo tep_draw_separator('pixel_trans.gif', '10', '1'); ?></td>

<td><?php echo tep_image_submit('button_continue.gif', IMAGE_BUTTON_CONTINUE); ?></td>

<td width="10"><?php echo tep_draw_separator('pixel_trans.gif', '10', '1'); ?></td>

</tr>

<tr>

<td class="main">

<?php echo HEADING_IPRECORDED_1;

$ip_iprecorded = YOUR_IP_IPRECORDED;

$ip = $HTTP_SERVER_VARS["REMOTE_ADDR"]; ?>

<?php echo "<div align=\"justify\"><font size=\".1\">$ip_iprecorded: $ip "; ?></div>

</td>

</tr>

</table></td>

</tr>

</table></td>

</tr>

</table></form></td>

<!-- body_text_eof //-->

<td width="<?php echo BOX_WIDTH; ?>" valign="top"><table border="0" width="<?php echo BOX_WIDTH; ?>" cellspacing="0" cellpadding="2">

<!-- right_navigation //-->

<?php include(DIR_WS_INCLUDES . 'column_right.php'); ?>

<!-- right_navigation_eof //-->

</table></td>

</tr>

</table>

<!-- body_eof //-->

 

<!-- footer //-->

<?php include(DIR_WS_INCLUDES . 'footer.php'); ?>

<!-- footer_eof //-->

<br>

</body>

</html>

<?php require(DIR_WS_INCLUDES . 'application_bottom.php'); ?>

[germ]

Nothing jumps out at me there.

 

Do you get the "Do you want to display nonsecure items?" when you access the create account page?

:unsure:

 

The problem must be in one of the "includes".

 

Please post the contemts of /includes/header.php.

[Nathali]

Nothing jumps out at me there.

 

Do you get the "Do you want to display nonsecure items?" when you access the create account page?

:unsure:

 

The problem must be in one of the "includes".

 

Please post the contemts of /includes/header.php.

 

Thank you very much Jim for your reply !!

 

Here is my includes/header.php :

 

<?php

/*

$Id: header.php,v 1.42 2003/06/10 18:20:38 hpdl Exp $

 

osCommerce, Open Source E-Commerce Solutions

http://www.oscommerce.com

 

Copyright © 2003 osCommerce

 

Released under the GNU General Public License

*/

 

 

// check if the 'install' directory exists, and warn of its existence

if (WARN_INSTALL_EXISTENCE == 'true') {

if (file_exists(dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']) . '/install')) {

$messageStack->add('header', WARNING_INSTALL_DIRECTORY_EXISTS, 'warning');

}

}

 

// check if the configure.php file is writeable

if (WARN_CONFIG_WRITEABLE == 'true') {

if ( (file_exists(dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']) . '/includes/configure.php')) && (is_writeable(dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']) . '/includes/configure.php')) ) {

$messageStack->add('header', WARNING_CONFIG_FILE_WRITEABLE, 'warning');

}

}

 

// check if the session folder is writeable

if (WARN_SESSION_DIRECTORY_NOT_WRITEABLE == 'true') {

if (STORE_SESSIONS == '') {

if (!is_dir(tep_session_save_path())) {

$messageStack->add('header', WARNING_SESSION_DIRECTORY_NON_EXISTENT, 'warning');

} elseif (!is_writeable(tep_session_save_path())) {

$messageStack->add('header', WARNING_SESSION_DIRECTORY_NOT_WRITEABLE, 'warning');

}

}

}

 

// check session.auto_start is disabled

if ( (function_exists('ini_get')) && (WARN_SESSION_AUTO_START == 'true') ) {

if (ini_get('session.auto_start') == '1') {

$messageStack->add('header', WARNING_SESSION_AUTO_START, 'warning');

}

}

 

if ( (WARN_DOWNLOAD_DIRECTORY_NOT_READABLE == 'true') && (DOWNLOAD_ENABLED == 'true') ) {

if (!is_dir(DIR_FS_DOWNLOAD)) {

$messageStack->add('header', WARNING_DOWNLOAD_DIRECTORY_NON_EXISTENT, 'warning');

}

}

 

if ($messageStack->size('header') > 0) {

echo $messageStack->output('header');

}

?>

<div class="fixcenter">

<table border="0" width="100%" cellspacing="0" cellpadding="0">

<tr class="header">

 

<?php

if ( $languages_id == 1 ) {

//english banner

?>

<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,19,0" width="768" height="90">

<param name="movie" value="/images/banners/english.swf" />

<param name="quality" value="high" />

<param name="FlashVars" value="language=en&site=en" />

<embed src="/images/banners/english.swf" quality="high" pluginspage="http://www.macromedia.com/go/getflashplayer" type="application/x-shockwave-flash" width="768" height="90"></embed>

</object>

<?php

}

else {

//hebrew banner

?>

<object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,19,0" width="768" height="90">

<param name="movie" value="/images/banners/english.swf" />

<param name="quality" value="high" />

<param name="FlashVars" value="language=he&site=he" />

<embed src="/images/banners/english.swf" quality="high" pluginspage="http://www.macromedia.com/go/getflashplayer" type="application/x-shockwave-flash" width="768" height="90"></embed>

</object>

<?php

}

?>

 

 

<td align="right" valign="bottom"><?php echo '<a href="' . tep_href_link(FILENAME_ACCOUNT, '', 'SSL') . '">' . tep_image(DIR_WS_IMAGES . 'header_account.gif', HEADER_TITLE_MY_ACCOUNT) . '</a>  <a href="' . tep_href_link(FILENAME_SHOPPING_CART) . '">' . tep_image(DIR_WS_IMAGES . 'header_cart.gif', HEADER_TITLE_CART_CONTENTS) . '</a>  <a href="' . tep_href_link(FILENAME_CHECKOUT_SHIPPING, '', 'SSL') . '">' . tep_image(DIR_WS_IMAGES . 'header_checkout.gif', HEADER_TITLE_CHECKOUT) . '</a>'; ?>  </td>

</tr>

</table>

<table border="0" width="100%" cellspacing="0" cellpadding="1">

<tr class="headerNavigation">

<td class="headerNavigation">  <?php echo $breadcrumb->trail(' » '); ?></td>

<td align="right" class="headerNavigation"><?php if (tep_session_is_registered('customer_id')) { ?><a href="<?php echo tep_href_link(FILENAME_LOGOFF, '', 'SSL'); ?>" class="headerNavigation"><?php echo HEADER_TITLE_LOGOFF; ?></a>  |  <?php } ?><a href="<?php echo tep_href_link(FILENAME_ACCOUNT, '', 'SSL'); ?>" class="headerNavigation"><?php echo HEADER_TITLE_MY_ACCOUNT; ?></a>  |  <a href="<?php echo tep_href_link(FILENAME_SHOPPING_CART); ?>" class="headerNavigation"><?php echo HEADER_TITLE_CART_CONTENTS; ?></a>  |  <a href="<?php echo tep_href_link(FILENAME_CHECKOUT_SHIPPING, '', 'SSL'); ?>" class="headerNavigation"><?php echo HEADER_TITLE_CHECKOUT; ?></a>   </td>

</tr>

</table>

<?php

if (isset($HTTP_GET_VARS['error_message']) && tep_not_null($HTTP_GET_VARS['error_message'])) {

?>

<table border="0" width="100%" cellspacing="0" cellpadding="2">

<tr class="headerError">

<td class="headerError"><?php echo htmlspecialchars(urldecode($HTTP_GET_VARS['error_message'])); ?></td>

</tr>

</table>

<?php

}

 

if (isset($HTTP_GET_VARS['info_message']) && tep_not_null($HTTP_GET_VARS['info_message'])) {

?>

<table border="0" width="100%" cellspacing="0" cellpadding="2">

<tr class="headerInfo">

<td class="headerInfo"><?php echo htmlspecialchars($HTTP_GET_VARS['info_message']); ?></td>

</tr>

</table>

<?php

}

?>

 

<!--[if gte IE 5.5000]>

<script language="JavaScript"> var ie55up = true </script>

<![endif]-->

<script language="JavaScript">

function fixPNG(myImage) // correctly handle PNG transparency in Win IE 5.5 or higher.

{

if (window.ie55up)

{

var imgID = (myImage.id) ? "id='" + myImage.id + "' " : ""

var imgClass = (myImage.className) ? "class='" + myImage.className + "' " : ""

var imgTitle = (myImage.title) ? "title='" + myImage.title + "' " : "title='" + myImage.alt + "' "

var imgStyle = "display:inline-block;" + myImage.style.cssText

var strNewHTML = "<span " + imgID + imgClass + imgTitle

strNewHTML += " style=\"" + "width:" + myImage.width + "px; height:" + myImage.height + "px;" + imgStyle + ";"

strNewHTML += "filter:progid:DXImageTransform.Microsoft.AlphaImageLoader"

strNewHTML += "(src=\'" + myImage.src + "\', sizingMethod='scale');\"></span>"

myImage.outerHTML = strNewHTML

}

}

</script>

 

Thank you for your kind help !

 

Best Regards, :rolleyes:

Nathali

[germ]

You didn't answer my question...

 

Do you get the "Do you want to display nonsecure items?" message in your browser when you access the create account page?

:unsure:

[Nathali]

You didn't answer my question...

 

Do you get the "Do you want to display nonsecure items?" message in your browser when you access the create account page?

:unsure:

 

No Jim, I don't get it..

 

Thanks for your help..

 

Nathali

[germ]

Rats.

:(

 

Please post the contemts of /includes/column_left.php

 

Nothing looked "non-secure" in the last file either.

[Nathali]

Rats.

:(

 

Please post the contemts of /includes/column_left.php

 

Nothing looked "non-secure" in the last file either.

 

column_left.php

 

<?php

/*

$Id: column_left.php,v 1.15 2003/07/01 14:34:54 hpdl Exp $

 

osCommerce, Open Source E-Commerce Solutions

http://www.oscommerce.com

 

Copyright © 2003 osCommerce

 

Released under the GNU General Public License

*/

// BOF: WebMakers Added: Login Box My Account

require(DIR_WS_BOXES . 'loginbox.php');

// EOF: WebMakers Added: Login Box My Account

 

if ((USE_CACHE == 'true') && empty($SID)) {

echo tep_cache_categories_box();

} else {

include(DIR_WS_BOXES . 'categories.php');

}

 

if ((USE_CACHE == 'true') && empty($SID)) {

echo tep_cache_manufacturers_box();

} else {

include(DIR_WS_BOXES . 'manufacturers.php');

}

 

require(DIR_WS_BOXES . 'whats_new.php');

require(DIR_WS_BOXES . 'search.php');

require(DIR_WS_BOXES . 'information.php');

?>

 

Thanks Jim !

[germ]

When you visit this page:

 

https://www.pcmemory.co.il/login.php

 

You don't get the message "This page contains both secure and non-secure items. Do you want to display the non-secure items?"

:unsure:

[Nathali]

When you visit this page:

 

https://www.pcmemory.co.il/login.php

 

You don't get the message "This page contains both secure and non-secure items. Do you want to display the non-secure items?"

:unsure:

 

No Jim, I don't get this message !

 

Thanks and regards,

 

Nathali

[Guest]

No Jim, I don't get this message !

 

Thanks and regards,

 

Nathali

I do, using ie6

[satish]

well is ssl is applied and configure is proper then there is a probability that the template was build withpit using oscommerce href function and the url to create account page might be hard coded.

 

Satish

[germ]

I can't help you find something that doesn't generate the warning message I described.

 

When you get your PC to display the warning message about "non-secure" items, THEN I may be able to help.

 

The only way I know how to track this down is to temporarily "comment out" parts of the code until the source(s) of the "non-secure" message can be identified.

 

But if your PC never generates the "non-secure" message, we'll never get there.

[satish]

chek the following:

1)No java script or css has a ref to non ssl url.

2)Base href has www.site.in

 

3)All images are from https url.

 

 

Satish