SSL Issue

[produceresults]

I am fairly new to OS Commerce but have worked on Magento, Drupal and other php programs. The problem is that when you go to checkout and are directed to the account page 1 of 2 things happen. 1. The green bar stating the site is secure flashes then disappears and the page loads fine. or 2. A popup comes up stating "There are some items on this page the are not secure, do you want to download them. blah blah" If you say no, you get the secure bar but several of the images do not show up.

 

I change the /catalog/admin/includes/configure.php and the /includes/configure.php files so that the images/ directory now is set to /images/

 

Is there another setting somewhere. The SSL and hosting are through Go Daddy and all seems to be working other than this issue. Below are copies of the configure.php files (critical information removed for security) and a link to the site for anyone to look at.

 

Please keep in mind I DID NOT BUILD THIS SITE. I was asked to assist after the site was hacked which I have been able to restore the site and close the hole that was used to get access. I am sure there is a lot wrong and I just need to get SSL working correctly.

 

<?php
 define('HTTP_SERVER', 'http://www.fivestarortho.com');
 define('HTTP_CATALOG_SERVER', 'http://www.fivestarortho.com');
 define('HTTPS_CATALOG_SERVER', 'https://www.fivestarortho.com');
 define('ENABLE_SSL_CATALOG', 'true');
//  define('DIR_FS_DOCUMENT_ROOT', '/var/www/vhosts/fivestarortho.com/httpdocs/catalog');
 define('DIR_FS_DOCUMENT_ROOT', '/home/content/f/i/v/fivestarortho/html/catalog');
 define('DIR_WS_ADMIN', '/catalog/admin/');
//  define('DIR_FS_ADMIN', '/var/www/vhosts/fivestarortho.com/httpdocs/catalog/admin/');
 define('DIR_FS_ADMIN', '/home/content/f/i/v/fivestarortho/html/catalog/admin/');
 define('DIR_WS_CATALOG', '/catalog/');
//  define('DIR_FS_CATALOG', '/var/www/vhosts/fivestarortho.com/httpdocs/catalog/');
 define('DIR_FS_CATALOG', '/home/content/f/i/v/fivestarortho/html/catalog/');
 define('DIR_WS_IMAGES', '/images/');
 define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
 define('DIR_WS_CATALOG_IMAGES', DIR_WS_CATALOG . '/images/');
 define('DIR_WS_INCLUDES', 'includes/');
 define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
 define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
 define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
 define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
 define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
 define('DIR_WS_CATALOG_LANGUAGES', DIR_WS_CATALOG . '/includes/languages/');
 define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . '/includes/languages/');
 define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . '/images/');
 define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');
 define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');

?>

 

<?php
 define('HTTP_SERVER', 'http://www.fivestarortho.com');
 define('HTTPS_SERVER', 'https://www.fivestarortho.com');
 define('ENABLE_SSL', true);
 define('HTTP_COOKIE_DOMAIN', 'www.fivestarortho.com');
 define('HTTPS_COOKIE_DOMAIN', 'www.fivestarortho.com');
 define('HTTP_COOKIE_PATH', '/catalog/');
 define('HTTPS_COOKIE_PATH', '/catalog/');
 define('DIR_WS_HTTP_CATALOG', '/catalog/');
 define('DIR_WS_HTTPS_CATALOG', '/catalog/');
 define('DIR_WS_IMAGES', '/images/');
 define('DIR_WS_ICONS', DIR_WS_IMAGES . '/icons/');
 define('DIR_WS_INCLUDES', 'includes/');
 define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
 define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
 define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
 define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
 define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');
 define('DIR_FS_CATALOG', '/home/content/f/i/v/fivestarortho/html/catalog ');
 //define('DIR_FS_CATALOG', '/var/www/vhosts/fivestarortho.com/httpdocs/catalog/');
 define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
 define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');
?>

 

https://www.fivestarortho.com/catalog/login.php

 

Thanks in advance for the assistance!

 

Scott

[germ]

Try turning "Hotlink Protection" off in the site's cPanel.

 

Some of the images are just missing.

 

When I copy/paste the image URL into Firefox then "View response headers" I get "404 Not Found".

[produceresults]

The images are not missing... It has to do with SSL and the Configuration.

 

Compare these 2 urls: (images are not showing if you set the browser to DO NOT DOWNLOAD CONTENT that is not secure

 

http://www.fivestarortho.com/catalog/

 

https://www.fivestarortho.com/catalog/

 

I will pay to have an expert help me with this.. I am based in the Dallas area.

 

Thanks,

 

Scott

[germ]

I didn't get any "unsecure content" with IE7 and FF3.0 at home.

 

And I don't get it with IE8 at work.

 

Did you do what I suggested?

:unsure:

 

The only reasons I am aware of that image won't show using SSL are:

 

1. They aren't there in the first place.

 

2. "Hotlink protection" in the sites cPanel isn't set up correctly and won't allow them to display.

 

3. The .htaccess file in the images folder disallows them.

 

You still have missing images.

 

The ones that are there don't show initially but if you copy/paste the image URL into the browser address bar they show, then page page they show on the web page.

 

It still acts like hotlink protection to me.

 

If it was a problem with the .htaccess I don't think they'd show at all.

 

And if I'm wrong it won't be the first (or last) time that's been true. :blush:

[germ]

And when you find out I'm right about the missing images I promise not to say "I told you so".

 

Not all are missing.

 

Just some.

[germ]

From the Web Developer plugin in Firefox:

 

Broken Images - http://www.fivestarortho.com/catalog/

http://www.fivestarortho.com/catalog/

  1. http://www.fivestarortho.com/images/catalog/body_top.jpg
  2. http://www.fivestarortho.com/images/table_background_default.gif
  3. http://www.fivestarortho.com/images/pixel_trans.gif
  4. http://www.fivestarortho.com/images/images/pixel_trans.gif
  5. http://www.fivestarortho.com/images/images/pixel_trans.gif
  6. http://www.fivestarortho.com/images/body_bottom.jpg
  7. http://www.fivestarortho.com/catalog/images/footer.jpg

Plug any of those into your browser address window and you get sent to your custom "404" page.

 

There are more than that on the login page.