Jump to content
  • Checkout
  • Login
  • Get in touch

osCommerce

The e-commerce.

Security Issues with Oscommerce


Guest

Recommended Posts

I am having SSL installed on my site so that there is no security messages that pop up and all pages are secured. I am being told the reason the security messages continue to pop up even after a thorough installation is the oscommerce.com link at the bottom of the page, because it is not a secure link. Is there a link to oscommerce I can replace with this one that is secure or am I allowed to remove it?

 

I appreciate any and all feedback!

 

Thank you,

VacationOne.com

Link to comment
Share on other sites

Your entire site is SSL for some reason. This should be fixed first and then fix the other issue. You probably edited your configure.php files to make it all secure.

Link to comment
Share on other sites

Your entire site is SSL for some reason. This should be fixed first and then fix the other issue. You probably edited your configure.php files to make it all secure.

 

Thats how I wanted it to be, as I dont want any popup security messages. I am currently having HostGator do all of the installation. I just wanted to know if oscommerce has a secure link that I can link to and if not, am I allowed to remove there link?

 

Thanks,

-VacationOne.com

Link to comment
Share on other sites

Once the certificate is installed all you have to do is edit your configure.php files from something like;

 

define('HTTP_SERVER', 'http://www.mysite.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'http://www.mysite.com'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', false); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', '.mysite.com');

define('HTTPS_COOKIE_DOMAIN', '.mysite.com');

 

 

To;

 

define('HTTP_SERVER', 'http://www.mysite.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://www.mysite.com'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', '.mysite.com');

define('HTTPS_COOKIE_DOMAIN', '.mysite.com');

 

BTW search engines do NOT index SSL pages so your site will not be listed by Google, MSN or Yahoo if you leave it the way it is now. No search engines = no customers

Link to comment
Share on other sites

BTW search engines do NOT index SSL pages so your site will not be listed by Google, MSN or Yahoo if you leave it the way it is now. No search engines = no customers

That must be true.

 

Google has 8 pages of other sites with links to VacationOne.com on them, but hasn't actually indexed the site itself.

 

And I don't think the link to osC is the problem.

 

I have the same code on my page and it doesn't cause a problem with SSL.

 

Although, I've looked at the source code, and I sure can't see what the problem really is....

:huh:

If I suggest you edit any file(s) make a backup first - I'm not perfect and neither are you.

 

"Given enough impetus a parallelogramatically shaped projectile can egress a circular orifice."

- Me -

 

"Headers already sent" - The definitive help

 

"Cannot redeclare ..." - How to find/fix it

 

SSL Implementation Help

 

Like this post? "Like" it again over there >

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...