Backend Security Certificate

[canadiandev]

Hi there.

 

I am working on this site for a client who hired me to fix the security issues and spruce it up a bit so I guess I inherited it from another developer. I have searched and searched but cannot find a straightforward answer to my issue. I have found many answers and tried many, many things but cannot seem to get things working. I don't care if the backend is secure or not so if the padlock wasn't there it would be fine, but the error is highly annoying to my client. Any help would be greatly appreciated (and I mean greatly :D ). Here's my issue...

 

When I log into the backend of the osCommerce site to administer the store there is a Security Certificate Error; Mismatched address. I used to have the exact same error on the front end of the site when you tried to purchase something but I was able to solve that issue (thanks Forum!). The site uses a Shared Certificate from the host.

 

I did get it to the point of the Certificate error being removed in the backend but then all the product images in the backend turned into red x's for error images and this message appeared along the top of the backend. "Error: Catalog images directory does not exist:". I changed the config files back to what they were and now am totally stuck. Here are my 2 config files:

 

Thank you in advance!

 

catalog/includes/configure.php

 

// * DIR_FS_* = Filesystem directories (local/physical)
// * DIR_WS_* = Webserver directories (virtual/URL)
  define('HTTP_SERVER', 'http://omfineindianimports.com'); // eg, [url="http://localhost"]http://localhost[/url] - should not be empty for productive servers
 define('HTTPS_SERVER', 'https://omfineindianimports.sslpowered.com/omfineindianimports.com/'); // eg, [url="https://localhost"]https://localhost[/url] - should not be empty for productive servers
 define('ENABLE_SSL', true); // secure webserver for checkout procedure?
 define('HTTP_COOKIE_DOMAIN', 'omfineindianimports.com');
 define('HTTPS_COOKIE_DOMAIN', 'omfineindianimports.sslpowered.com/omfineindianimports.com/');
 define('HTTP_COOKIE_PATH', '/catalog//catalog/');
 define('HTTPS_COOKIE_PATH', '/catalog//catalog/');
 define('DIR_WS_HTTP_CATALOG', '/catalog//catalog/');
 define('DIR_WS_HTTPS_CATALOG', '/catalog//catalog/');
 define('DIR_WS_IMAGES', 'images/');
 define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
 define('DIR_WS_INCLUDES', 'includes/');
 define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
 define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
 define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
 define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
 define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');
 define('DIR_FS_CATALOG', dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME']));
 define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
 define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

_________________________________________________

 

catalog/admin/includes/configure.php

 

// define our webserver variables
// FS = Filesystem (physical)
// WS = Webserver (virtual)
 define('HTTP_SERVER',              'https://omfineindianimports.com'); // eg, [url="http://localhost"]http://localhost[/url] or - [url="https://localhost"]https://localhost[/url] 
 define('HTTP_CATALOG_SERVER',      'https://omfineindianimports.sslpowered.com/omfineindianimports.com/');
 define('HTTPS_CATALOG_SERVER',     'https://omfineindianimports.sslpowered.com/omfineindianimports.com/');
 define('ENABLE_SSL_CATALOG',       'true'); // secure webserver for catalog module
 define('DIR_FS_DOCUMENT_ROOT',     $DOCUMENT_ROOT . '/catalog//catalog/' ); // where your pages are located on the server. 
 define('DIR_WS_ADMIN',             '/catalog//catalog/admin/');
 define('DIR_FS_ADMIN',             $DOCUMENT_ROOT . '/catalog//catalog/admin/');
 define('DIR_WS_CATALOG',           '/catalog//catalog/');
 define('DIR_FS_CATALOG',           $DOCUMENT_ROOT . '/catalog//catalog/');
 define('DIR_WS_IMAGES',            'images/');
 define('DIR_WS_ICONS',             DIR_WS_IMAGES . 'icons/');
 define('DIR_WS_CATALOG_IMAGES',    DIR_WS_CATALOG . 'images/');
 define('DIR_WS_INCLUDES',          'includes/');
 define('DIR_WS_BOXES',             DIR_WS_INCLUDES . 'boxes/');
 define('DIR_WS_FUNCTIONS',         DIR_WS_INCLUDES . 'functions/');
 define('DIR_WS_CLASSES',           DIR_WS_INCLUDES . 'classes/');
 define('DIR_WS_MODULES',           DIR_WS_INCLUDES . 'modules/');
 define('DIR_WS_LANGUAGES',         DIR_WS_INCLUDES . 'languages/');
 define('DIR_WS_CATALOG_LANGUAGES', DIR_WS_CATALOG . 'includes/languages/');
 define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');
 define('DIR_FS_CATALOG_IMAGES',    DIR_FS_CATALOG . 'images/');
 define('DIR_FS_CATALOG_MODULES',   DIR_FS_CATALOG . 'includes/modules/');
 define('DIR_FS_BACKUP',            DIR_FS_ADMIN . 'backups/');

// define our database connection

[lindsayanng]

umm. you really shouldnt post your ENTIRE configure code on the net without replaceing key info with XXX

[BryceJr]

Replace all double forward slash "//" with one "/" slash

 

Example:

 

From this: /catalog//catalog/

 

To this: /catalog/catalog/

 

------

 

Try this in your admin configure.php -- BACKUP your file(s) always.

 

define('DIR_FS_DOCUMENT_ROOT', $_SERVER['DOCUMENT_ROOT'] . '/catalog/catalog/');

define('DIR_FS_ADMIN', $_SERVER['DOCUMENT_ROOT'] . '/catalog/catalog/admin/');

define('DIR_FS_CATALOG', $_SERVER['DOCUMENT_ROOT'] . '/catalog/catalog/');

 

Also make sure that the folders with images for your admin are uploaded.

 

You may want to re-upload admin images just in case they got corrupted.

Remember to upload in BINARY mode when using FTP for image files.

[canadiandev]

Hi there.

 

Thanks for the advice but it did nothing to solve the Security issue. I am not receiving the images error any longer only a backend security issue because I went back to the original config files. Any thoughts on either removing the https from the backend store admin or fixing the secuirty issue?

 

Thanks very much.