With SSL, images won't display

[dskowron]

I have an OSC installation at www.redbeartrading.com/osc. It works great with one exception. Any time it switches over to SSL mode, images don't display. If I right-click and say "View Image", it shows up fine, and when I go back to the page the image is there. If I do it again with a different image, then THAT image shows up and the last one goes away. I don't get the broken image box, simply no image shows up, only the ALT text. I'm using an iMac G5.Try it. Go to my store and click on the "My Account" link and see for yourself. The images don't appear. Same thing if I use https for the admin. But I don't need admin to be in https as I have a strong password protected directory for it.

 

I have poured through countless posts here in vain trying to find the definitive answer, but nothing has helped. Here are the appropriate lines from my two config files (my install is in a directory called "osc", not "catalog"):

 

osc/includes/configure.php:

 

define('HTTP_SERVER', 'http://www.redbeartrading.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://redbeartrading.com'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', 'true'); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'http://www.redbeartrading.com/');

define('HTTPS_COOKIE_DOMAIN', 'http://redbeartrading.com/');

define('HTTP_COOKIE_PATH', '/osc/');

define('HTTPS_COOKIE_PATH', '/osc/');

define('DIR_WS_HTTP_CATALOG', '/osc/');

define('DIR_WS_HTTPS_CATALOG', '/osc/');

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

 

AND

 

admin/includes/configure.php:

 

define('HTTP_SERVER', 'http://www.redbeartrading.com/osc/');

define('HTTP_CATALOG_SERVER', 'http://www.redbeartrading.com/osc');

define('HTTPS_CATALOG_SERVER', 'https://redbeartrading.com/osc');

define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module

define('DIR_FS_DOCUMENT_ROOT', '/home2/redbeart/public_html/');

 

 

My SSL certificate is configured for https://redbeartrading.com, NOT www.redbeartrading.com

 

I'm on one of webhostingbuz.com's Linux servers. It's their install of OSC. I'm at a complete loss. Everything works fine EXCEPT this image thing. It's making me long for the days prior to the discovery of electricity.

 

Of course, any help would be very highly appreciated.

 

TIA,

Dave Skowron

[germ]

Permission problem.

 

Go to https://yourdomain.com/images

 

Click on any image.

 

Forbidden

You don't have permission to access /osc/images/CLASSICS.JPG on this server.

 

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request.

:o

[dskowron]

Sorry, but that ain't it. Changing the perms didn't do anything. If you go to www.redbeartrading.com/osc/images and click on any of the images they show. Just to be sure I chmodded one of them to 777 and it still doesn't show in the checkout screens. It's the file called header_checkout.gif. No dice still. I appreciate your help though.

[germ]

Sorry, but that ain't it.

B.S.!

 

Put this in your pipe and smoke it:

 

https://redbeartrading.com/osc/images/account_personal.gif

 

Click that link.

<_<

[dskowron]

Hmm . . . Well, click this one: https://redbeartrading.com/osc/images/header_checkout.gif

 

Same place, same problem.

[germ]

Well DOH!

:huh:

 

That's what I said - permission problem.

[germ]

I'd say this is something you should discuss with your host.

 

If you can't directly access images thru the browser (even on the HTTPS side) it's a server/setup/permission problem (IMHO).

 

Nothing at all to do with osC.

[dskowron]

Thing is, the image that CAN be viewed is one of the ones that ISN'T showing up in the checkout. Perms are 777 just to be sure. Still no go.

 

The hosting company is full of idiots who try and blame the people who wrote OSC.

[germ]

Look in your webhost control panel.

 

There may be something called "Hotlinking Protection".

 

If it's on, turn it off.

 

This is just a hunch.

 

Maybe it isn't the problem.

[germ]

And for these:

 

define('HTTP_COOKIE_DOMAIN', 'http://www.redbeartrading.com/');
define('HTTPS_COOKIE_DOMAIN', 'http://redbeartrading.com/');

Try:

 

define('HTTP_COOKIE_DOMAIN', 'http://www.redbeartrading.com');
define('HTTPS_COOKIE_DOMAIN', 'https://redbeartrading.com');

That may not help the image problem.

[dskowron]

Man, I came to the same conclusion about the hotlink protection. I added the https domain and it worked. I had already added the non-SSL url thinking that it is the same thing.

 

Thanks for the help - I really appreciate it and I hope that other people can get benefit from this. It was a huge lesson learned for me.