SSL Security Question for you

[steward dondi]

I am having an issues with my oscommerce site. When I log into admin I get this for ssl: "You are not protected by a secure SSL connection"

 

 

I've tried changing the includes/configure.php file and admin/includes/configure.php file and to no avail I've come to a hurdle I need help jumping.

 

Here is my site: http://www.bobostinytreasures.com

 

If you look at the top there is no: "https" only "http" and at the bottom of the entire page there is no lock there or in the url box at the top. Can you help me figure this out. THanks in advance

 

Steward Dondi

 

includes/configure.php coding:

 

<?php

/*

osCommerce, Open Source E-Commerce Solutions

http://www.oscommerce.com

 

Copyright © 2003 osCommerce

 

Released under the GNU General Public License

*/

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'http://www.bobostinytreasures.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', ''); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'www.bobostinytreasures.com');

define('HTTPS_COOKIE_DOMAIN', '');

define('HTTP_COOKIE_PATH', '/');

define('HTTPS_COOKIE_PATH', '');

define('DIR_WS_HTTP_CATALOG', '/');

define('DIR_WS_HTTPS_CATALOG', '');

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');

define('DIR_FS_CATALOG', '/home/content/b/o/b/bobostinytreas/html/');

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

// define our database connection

define('DB_SERVER', 'p41mysql115.secureserver.net'); // eg, localhost - should not be empty for productive servers

 

 

 

Admin/Includes/configure.php

 

<?php

/*

osCommerce, Open Source E-Commerce Solutions

http://www.oscommerce.com

 

Copyright © 2003 osCommerce

 

Released under the GNU General Public License

*/

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'http://www.bobostinytreasures.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTP_CATALOG_SERVER', 'http://www.bobostinytreasures.com');

define('HTTPS_CATALOG_SERVER', '');

define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module

define('DIR_FS_DOCUMENT_ROOT', '/home/content/b/o/b/bobostinytreas/html/'); // where the pages are located on the server

define('DIR_WS_ADMIN', '/admin/'); // absolute path required

define('DIR_FS_ADMIN', '/home/content/b/o/b/bobostinytreas/html/admin/'); // absolute pate required

define('DIR_WS_CATALOG', '/'); // absolute path required

define('DIR_FS_CATALOG', '/home/content/b/o/b/bobostinytreas/html/'); // absolute path required

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_CATALOG_IMAGES', DIR_WS_CATALOG . 'images/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

define('DIR_WS_CATALOG_LANGUAGES', DIR_WS_CATALOG . 'includes/languages/');

define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');

define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');

define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');

define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');

 

// define our database connection

define('DB_SERVER', 'p41mysql115.secureserver.net'); // eg, localhost - should not be empty for productive servers

 

 

 

any clues?

[Jack_mcs]

In admin/includes/configure.php, the following

define('HTTP_SERVER', 'http://www.bobostinytreasures.com'); // eg, http://localhost - should not be empty for productive servers
define('HTTP_CATALOG_SERVER', 'http://www.bobostinytreasures.com');
define('HTTPS_CATALOG_SERVER', '');

should be

define('HTTP_SERVER', 'https://www.bobostinytreasures.com'); // eg, http://localhost - should not be empty for productive servers
define('HTTP_CATALOG_SERVER', 'https://www.bobostinytreasures.com');
define('HTTPS_CATALOG_SERVER', 'https://www.bobostinytreasures.com');

 

Jack

[steward dondi]

In admin/includes/configure.php, the following

define('HTTP_SERVER', 'http://www.bobostinytreasures.com'); // eg, http://localhost - should not be empty for productive servers
define('HTTP_CATALOG_SERVER', 'http://www.bobostinytreasures.com');
define('HTTPS_CATALOG_SERVER', '');

should be

define('HTTP_SERVER', 'https://www.bobostinytreasures.com'); // eg, http://localhost - should not be empty for productive servers
define('HTTP_CATALOG_SERVER', 'https://www.bobostinytreasures.com');
define('HTTPS_CATALOG_SERVER', 'https://www.bobostinytreasures.com');

 

Jack

 

thanks for stopping by to check out the situation Jack, I made the changes you said and typed in: www.bobostinytreasures.com and I dont see anything changed. In the box up top where the url goes it's still the same

 

I made the https changes to both files in includes and admin and did see a change when I try to log in. At the top I see a lock but the lock says warning: contains unaunthenticated content.

 

Any ideas on what I need to do next? thanks much

 

steward dondi

[Guest]

made the https changes to both files in includes and admin

 

Jacks code was JUST for the admin, for catalog/includes/configure.php you need

 

define('HTTP_SERVER', 'http://www.bobostinytreasures.com'); // eg, http://localhost - should not be empty for productive servers
define('HTTPS_SERVER', 'https://www.bobostinytreasures.com'); // eg, https://localhost - should not be empty for productive servers
define('ENABLE_SSL', true); // secure webserver for checkout procedure?
define('HTTP_COOKIE_DOMAIN', 'www.bobostinytreasures.com');
define('HTTPS_COOKIE_DOMAIN', 'www.bobostinytreasures.com');
define('HTTP_COOKIE_PATH', '/');
define('HTTPS_COOKIE_PATH', '/');
define('DIR_WS_HTTP_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', '/');

 

 

When signing into your admin you should not do it with www.bobostinytreasures.com, it should be https://www.bobostinytreasures.com. If working it will have the lock in your browser and your admin will say "protected by unknown ssl"

[germ]

The Google-analytics code in the footer will stop the SSL lock from showing. That's part of (if not all of) your "unaunthenticated content".

 

You can either remove it, or post the contents of your footer.php and I can show you how to make PHP "skip" the code when in SSL mode, if you want.