No padlock on SSL pages... GURU NEEDED

[marcelev]

I have a shared ssl setup... I have looked at all the sugestions for adding the padlock ... I think that they are all flawed..

 

The fixes suggested..

1. Change this line in checkout_payment.php to <base href="<?php echo (getenv('HTTPS') == 'on' ? HTTP_SERVER : HTTPS_SERVER) . DIR_WS_CATALOG; ?>">

Pages that you whan to be loaded from ssl...

 

Yes this does add the padlock.. the page and images will be loaded from the ssl server.. however I ran into session problems.. Because your session is started on the http side.. then a new one is started again on the https side... and your products get messed up... Also the product images arn't stored on the ssl side.. so you get broken images...

 

 

I have tried everything... I can't get that darn padlock... without breaking oscommerce.....

[Fuzi0n]

I had similar problems. After trying to figure out what is wrong I found out that the " getenv('HTTPS') == 'on' " was the culprit. My server didn't return any response. I was forced to find a "work around" for my problem.

 

I had to find a command that my server does recognize. I decided to use the " $HTTP_HOST " command and it works great!!! :D

 

Replace this code in application_top.php (around line 40):

 

 $request_type = (getenv('HTTPS') == 'on') ? 'SSL' : 'NONSSL';

 

with this:

 

$request_type = (eregi ($HTTP_HOST, HTTPS_SERVER)) ? 'SSL' : 'NONSSL';

 

and the padlock will appear minus broken images! :wink:

 

Just make sure that 'HTTPS_SERVER' in configuration.php is correct!

 

And use the latest version of osCommerce otherwise you'll have to change the HTML header code of every file in the main catalog directory.

[cpv2nd]

I have a similar problem...i have a shared ssl...when you go to my checkout it works fine securing all info...but when you go to my administration pages the pad lock is opened and it states "You are not protected by a secure SSL connection" i have checked the configuration and its set up right...any suggestion please....thanks :?:

[Guest]

If you want your padlock close , instead of http://www.mydomain.com/catalog/admin just put

https://www.mySSLaddress.com/catalog/admin

 

HTH

[cpv2nd]

under which file would i insert this new address...? :D

[Guest]

Not in a file but in your browser window