osCid, cookies, SSL, and domain name issue

[♥mdtaylorlrim]

Ok, I come from the really old school where your SSL domain actually went to a different box, and you had a domain (mydomain.com), a web server (www.mydomain.com), a secure webserver (secure.mydomain.com), a mail server (mail.mydomain.com), etc...no such thing as virtual domains... you see where this is going.

 

So I have this shop at www.mydomain.com but my ssl cert is for mydomain.com, both on same box, both virtual domains.

 

Everything works well for the most part, with a minor anomoly.

 

1) Visit site. Add to cart. Select checkout. Get login screen and log in. Checkout. Nothing strange here.

2) Visit site. Log in. Add product to cart. Checkout. Get sent to log in screen and log in. Continue checkout with no loss of cart. Strange.

3) Visit site. Log in. Add product to cart. Continue shopping. Lose cart. Add different product. Checkout. Log in. Both products now in cart. Continue checkout. Very strange.

 

And here is the relevant part of configure.php

 

define('HTTP_SERVER', 'http://www.mydomain.com');

define('HTTPS_SERVER', 'https://mydomain.com');

define('ENABLE_SSL', 'true');

define('HTTP_COOKIE_DOMAIN', 'www.mydomain.com');

define('HTTPS_COOKIE_DOMAIN', 'mydomain.com');

define('HTTP_COOKIE_PATH', '/catalog/');

define('HTTPS_COOKIE_PATH', '/catalog/');

define('DIR_WS_HTTP_CATALOG', '/catalog/');

define('DIR_WS_HTTPS_CATALOG', '/catalog/');

define('DIR_WS_IMAGES', 'images/');

 

 

Aside from either forcing everything to mydomain.com for the shop and ssl, or obaining a new ssl cert for www.mydomain.com is there any different config settings to cure this?

 

 

Forcing cookies did not result is satisfactory operation.

 

Any suggestions?

[johnnybebad]

Ok, I come from the really old school where your SSL domain actually went to a different box, and you had a domain (mydomain.com), a web server (www.mydomain.com), a secure webserver (secure.mydomain.com), a mail server (mail.mydomain.com), etc...no such thing as virtual domains... you see where this is going.

 

So I have this shop at www.mydomain.com but my ssl cert is for mydomain.com, both on same box, both virtual domains.

 

Everything works well for the most part, with a minor anomoly.

 

1) Visit site. Add to cart. Select checkout. Get login screen and log in. Checkout. Nothing strange here.

2) Visit site. Log in. Add product to cart. Checkout. Get sent to log in screen and log in. Continue checkout with no loss of cart. Strange.

3) Visit site. Log in. Add product to cart. Continue shopping. Lose cart. Add different product. Checkout. Log in. Both products now in cart. Continue checkout. Very strange.

 

And here is the relevant part of configure.php

 

define('HTTP_SERVER', 'http://www.mydomain.com');

define('HTTPS_SERVER', 'https://mydomain.com');

define('ENABLE_SSL', 'true');

define('HTTP_COOKIE_DOMAIN', 'www.mydomain.com');

define('HTTPS_COOKIE_DOMAIN', 'mydomain.com');

define('HTTP_COOKIE_PATH', '/catalog/');

define('HTTPS_COOKIE_PATH', '/catalog/');

define('DIR_WS_HTTP_CATALOG', '/catalog/');

define('DIR_WS_HTTPS_CATALOG', '/catalog/');

define('DIR_WS_IMAGES', 'images/');

 

 

Aside from either forcing everything to mydomain.com for the shop and ssl, or obaining a new ssl cert for www.mydomain.com is there any different config settings to cure this?

 

 

Forcing cookies did not result is satisfactory operation.

 

Any suggestions?

 

 

I had something similar, dont know how it came about, I emptied the customers basket table seems to work

[web-project]

Can be the session issue on the server or setting of your oscommerce.

 

try the following:

define('HTTP_COOKIE_DOMAIN', 'mydomain.com');

define('HTTPS_COOKIE_DOMAIN', 'mydomain.com');

or

Force Cookie Use to TRUE if the above configures not help.

 

I noticed the oscommerce works different way depends on the settings of the php on the server.

[♥mdtaylorlrim]

Forcing cookies to true makes it worse. Never remembers your login, but maybe that is my browser settings not accepting cookies.

 

I'll try those settings but would have thought that if you browse to www.mydomain.com you would have to set the cookie to www.mydomain.com

 

I'll know in a couple of hours....