Problem with SSL server, software version 2.1

[iz]

:(

I have a problem to run shopping card on SSL server. (ver2.1)

 

The same files i have on testing linux box and it work fine (http and https on single box), but it does not work on shared http SSL server (where http on one and ssl on other, two different boxes).

 

http://mydomainname/catalog/

 

https:// secure.someserver/myaccount/catalog/

 

 

After I added product to cart

 

http://mydomainname/catalog/shopping_cart....9b7d16addd1e426

 

 

Then I do checkout

 

https:/secure.someserver/myaccount/catalog/checkout_payment.php?PHPSESSID=144443d9d0e350e5d9b7d16addd1e426

 

it seems does not see anycart items and redirect me back to

 

http://mydomainname/catalog/shopping_card.php

 

I would say its not keeping cross referencing the session id when it switches over to https.

 

Any ideas?

[Guest]

I have a similar problem. When I add something to the cart and then go to checkout, but am not logged in yet, it asks me to login, which is what it should do. If I create a new account, and click to checkout after the account creation, it just brings me right back to the shopping cart. The problem is that it thinks I have no cart items, but I do, or it looks like it.

 

I went to the demo catalog for 2.1 and it does the same thing. I am working on a solution, if anybody has any ideas that would be great.

 

Thanks,

crazywoman

[rseigel]

Both of you really should scrap 2.1 and go with 2.2. There were some odd things about 2.1 that most of us barely remember. 2.2 is solid as a rock now and there's some great documentation at http://oscdox.com as well. :wink:

[Guest]

Thanks I know I should scrap 2.1, but I have put 3 months into getting to work with new cool stuff, and would like to figure this out. I am very close to having it working.

 

crazywoman

[Guest]

Does anybody have any ideas on how the current version tracks session ids from one server to another? Is this possible?

 

It seems that everything worked fine until I added my secure https on my virtual server and now it can't keep track of the session variables. ???

 

Please help!

 

Thanks,

crazywoman

[Guest]

Version 2.1 problem. It may also be a problem in 2.2 since I saw other posts from people using version 2.2 with this same problem.

 

We finally found the problem. In the application_top.php file where the code says //Let's start our session. The SID variable did not have a $ sign in front of it, this was causing some major problems in the passing of the session id when we went from our non-secure server to our secure server.

 

if (!$)

tep_session_id( $HTTP_GET_VARS[tep_session_name()] );

tep_session_start();

if (function_exists('session_set_cookie_params')) {

session_set_cookie_params(0, DIR_WS_CATALOG);

}

 

I hope this helps others.

 

If you are missing the $ sign then it is very possible that this will fix your problem.

 

Good luck!

Crazywoman

[Guest]

This is what mine says, is there a reason mine doesn't say what yours does?

 

Application_top.php

 

 

// lets start our session

if ($HTTP_POST_VARS[tep_session_name()]) {

tep_session_id($HTTP_POST_VARS[tep_session_name()]);

}

if ( (getenv('HTTPS') == 'on') && ($HTTP_GET_VARS[tep_session_name()]) ) {

tep_session_id($HTTP_GET_VARS[tep_session_name()]);

}

if (function_exists('session_set_cookie_params')) {

session_set_cookie_params(0, substr(DIR_WS_CATALOG, 0, -1));

}

[Guest]

I am using the stable release version 2.1, not the new version 2.2. This could be the difference.

[Guest]

was hoping I was just looking in the wrong place :(

I need as fix for this....if anyone has anymore suggestions, please post.

Thanks