OSCommerce SSL pages / files

[dangermouse1981]

Hi there,

 

First off, I'm a newbie at OSCommerce and am unfortunately stuck with hacking around a messed up installation for SEO purposes.

 

For some reason the site uses SSL on pages that do not require it - I'm assuming this is a problem with the way it has been configured, or the way the template has been setup. I hope to resolve the problem by using Mod_Rewrite as I really don't know enough about the site install, or OsCommerce generally to go down another route.

 

I propose to setup a rewrite rule that when the site is accessed on port 443, if the page being accessed is not on a white list the user is redirected to the the HTTP equivilant. So to my question!

 

Firstly is this likely to work? or are there a ton of gotchas that I'm not aware of? And secondly, which OsCommerce files would need to be on this white list? i.e. which files should be access via SSL ?

 

Let me know if I can provide any further info, or if I'm totally deluding myself - any assistance or comments appreciated.

 

Cheers,

 

DM

[Jack_mcs]

The code handles the switcing by itself based on the configure file settings. You may want to look at this thread with help on setting that up. Using an .htaccess file to do this will just cause more confusion and is not necessary. It's possible your template is coded incorrectly but without knowing what pages are switching that you think shouldn't be, it is difficult to say.

 

Jack

[dangermouse1981]

The code handles the switcing by itself based on the configure file settings. You may want to look at this thread with help on setting that up. Using an .htaccess file to do this will just cause more confusion and is not necessary. It's possible your template is coded incorrectly but without knowing what pages are switching that you think shouldn't be, it is difficult to say.

 

Jack

 

Hi Jack,

 

Thanks for the reply - I managed to find the URLs that were switching incorrectly within the template and can see how that works, however I'm a little concerned that the entire site is accessible via HTTPS if you type it into the address bar - is this normal?

 

Cheers,

 

Steve

[Jack_mcs]

Yes, the ssl is installed on the server for the domain name so any page in the domain can be accessed with it, although some may not display correctly. But that is only if you go directly to it. If you let the code in the shop do its work, only pages that should be secure will use the ssl.

 

Jack