Weird effect with SSL setup

[nigelrrb]

Hi,

 

I have installed an SSL certificate from our host, Godaddy. No issue with the cert, all seems to be OK. However, I have an issue (relatively minor) that I can't figure out. Here goes:

 

osCommerce is installed at our site at http://www.ultimatetransformation.co.uk/estore/catalog

 

Having read many posts here and thinking I would get it right first time (ha ha) I set the config files as follows:

 

/estore/catalog/includes/configure.php:

define('HTTP_SERVER', 'http://ultimatetransformation.co.uk'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://ultimatetransformation.co.uk/estore/catalog/'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', '.ultimatetransformation.co.uk');

define('HTTPS_COOKIE_DOMAIN', '.ultimatetransformation.co.uk');

 

I had to add the bit in red to get SSL to work at all, otherwise it was trying to access pages like https://www.ultimatetransformation.co.ukcheckout_process.php (no directories, slashes etc) which of course it couldn't do.

 

/estore/catalog/admin/includes/configure.php:

define('HTTP_SERVER', 'http://ultimatetransformation.co.uk/'); // eg, http://localhost - should not be empty for productive servers

define('HTTP_CATALOG_SERVER', 'https://ultimatetransformation.co.uk/');

define('HTTPS_CATALOG_SERVER', 'https://ultimatetransformation.co.uk/');

define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module

 

Everything works a treat until the very last fence. Doing a test transaction via Paypal sandbox the process goes like a dream, going through to the page:

/estore/catalog/checkout_success.php

and displays the page headed "Your Order Has Been Processed!" However, on clicking the "Continue" button the URL goes to:

 

https://ultimatetransformation.co.uk/estore/catalog//estore/catalog/index.php?action=notify&notify[]=

 

The bolded bits are mine to illustrate the problem. Somehow it is duplicating the "/estore/catalog/" in the URL, leading to a 404 not found.

 

I can partially overcome the problem by changing line 74 of /catalog/checkout_success.php from:

 

<td width="100%" valign="top"><?php echo tep_draw_form('order', tep_href_link(FILENAME_CHECKOUT_SUCCESS, 'action=update', 'SSL')); ?><table border="0" width="100%" cellspacing="0" cellpadding="0">

 

to:

 

<td width="100%" valign="top"><?php echo tep_draw_form('order', tep_href_link(FILENAME_CHECKOUT_SUCCESS, 'action=update', 'NONSSL')); ?><table border="0" width="100%" cellspacing="0" cellpadding="0">

 

This allows osC to return to the /estore/catalog/index.php page with no trouble, except that a warning pops up that says:

 

"Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.

 

Are you sure you want to continue sending this information?"

 

What do I need to do to get the process to complete properly, returning to the /estore/catalog/index.php page without the warning? Having rummaged through this forum I haven't found the answer, so I thought I'd better ask an expert!

 

Many thanks,

 

Nigel Barker.

[♥FWR Media]

  define('HTTP_SERVER', 'http://www.ultimatetransformation.co.uk');
 define('HTTPS_SERVER', 'https://www.ultimatetransformation.co.uk');
 define('ENABLE_SSL', true);
 define('HTTP_COOKIE_DOMAIN', 'www.ultimatetransformation.co.uk');
 define('HTTPS_COOKIE_DOMAIN', 'www.ultimatetransformation.co.uk');
 define('HTTP_COOKIE_PATH', '/estore/catalog/');
 define('HTTPS_COOKIE_PATH', '/estore/catalog/');
 define('DIR_WS_HTTP_CATALOG', '/estore/catalog/');
 define('DIR_WS_HTTPS_CATALOG', '/estore/catalog/');

 

And it is a very bad move to have your shop two directories back from root it'll kill your seo.

[nigelrrb]

Hi Robert,

 

Many thanks for the help, and particularly how fast it was!

 

I take your point about SEO problems with the store being 2 layers back. How much trouble/recoding etc is it to move it up one to http://www.ultimatetransformation.co.uk/catalog/? From reading your code that will need amending, but how much else would there be? We can't put it right on the root as the domain already has an active website on it!

 

You can probably tell I knew nothing about osCommerce a week ago.

 

Many thanks again for your help.

 

Best regards,

 

Nigel.

[♥FWR Media]

How much trouble/recoding etc is it to move it up one to http://www.ultimatetransformation.co.uk/catalog/

 

  define('HTTP_SERVER', 'http://www.ultimatetransformation.co.uk');
 define('HTTPS_SERVER', 'https://www.ultimatetransformation.co.uk');
 define('ENABLE_SSL', true);
 define('HTTP_COOKIE_DOMAIN', 'www.ultimatetransformation.co.uk');
 define('HTTPS_COOKIE_DOMAIN', 'www.ultimatetransformation.co.uk');
 define('HTTP_COOKIE_PATH', '/catalog/');
 define('HTTPS_COOKIE_PATH', '/catalog/');
 define('DIR_WS_HTTP_CATALOG', '/catalog/');
 define('DIR_WS_HTTPS_CATALOG', '/catalog/');

 

Don't forget that the admin configure files will need alterring too.

[nigelrrb]

Hi Robert,

 

Many thanks for the speedy reply - makes me feel like I've got an inside track!

 

Thanks for the code - I had worries it was going to be much more complex than that.

 

Best regards,

 

Nigel.

[♥Vger]

Why not go the whole hog and move it down into the root? There's no conflict between osCommerce and HTML pages.

 

The problem I see is that in your root level homepage you have 20 links in your header and only one of them goes to your osCommerce store, and that link just says "Products". There is one link in red which does stand out, but that's to the Contact Us page. I fail to see the reasoning behind this.

 

Vger

[meulenb]

I'm having a similar SSL set up as Nigel (now) has:

 

/includes/configure.php....

 

 define('HTTP_SERVER', 'http://www.houseofespresso.nl');
 define('HTTPS_SERVER', 'https://www.houseofespresso.nl');
 define('ENABLE_SSL', true);
 define('HTTP_COOKIE_DOMAIN', 'houseofespresso.nl');
 define('HTTPS_COOKIE_DOMAIN', 'houseofespresso.nl');
 define('HTTP_COOKIE_PATH', '/catalog/');
 define('HTTPS_COOKIE_PATH', '/catalog/');

 

and admin/includes/configure.php....

 

 define('HTTP_SERVER', 'http://www.houseofespresso.nl');
 define('HTTP_CATALOG_SERVER', 'https://www.houseofespresso.nl');
 define('HTTPS_CATALOG_SERVER', 'https://www.houseofespresso.nl');
 define('ENABLE_SSL_CATALOG', 'true');

 

All working fine except for checkout_shipping.php and checkout_payment.php: pages appear almost blank, no format, layout, html gone....

(further details on http://www.oscommerce.com/forums/index.php?showtopic=313025)

 

I've tried many things toward settings, replacing pages with the OsC original, etc but nothing succeeded so far so I'm pretty much in the dark by now.

[nigelrrb]

Hi Vger,

 

I'm now slightly confused. If the whole osCommerce site is moved down to the root, there will be 2 index files - index.htm (the original one) and index.php (osCommerce). Won't this lead to conflicts when visitors enter the web address in their browser? As I said earlier I am new to osCommerce (learning fast) so there is probably a trick that I don't know of. I follow the concept that html and php can sit side by side, but how would a browser resolve the index/index question?

 

The red Contact button was advised by a marketing guru on the basis that because red stands out it prompts visitors to contact us. Not sure it works though. The reasoning behind the site as a whole is sort of back to front - the html site is the original one we have had for a while and the osCommerce has been added in the last few days, replacing the single html pages previously used for products. In other words, it wasn't conceived as an osCommerce site from the beginning but was added as a back-end shop. Am I making sense?

 

If there is a way to have osC on the root without conflicting with the html site I would be very grateful, as this will give the products exposure to Google etc. The only issue I can see is the index/index one.

 

I have already moved it one level to /catalog/ and it functions fine, apart from an oddity - the Admin panel used to ask for the login and password a 2nd time to access any of the functions, and now goes straight into the function off the Admin panel. Also, the Admin panel advises that it is not secured with SSL, but as far as I can tell all the SSL definitions are OK in the admin/includes/configure.php file. Any ideas?

 

I have to say I have been very impressed with the help from the osC people, particularly how quickly the responses can come through. Bet you get fed up with idiots like me though...

 

Once again. many thanks for the help.

 

Best regards,

 

Nigel.