SSL in product listing

[Andromeda100]

Hi,

 

I use the option SSL in my shop. When a user navigate through the categories products the link will be redirect to https://... I don't understand why the URL changes to https:// Regulary the link is only change in secure parts like login or cart but why in product listing?

Could anybody help what is the problem? :)

 

Thanks! :)

[Jack_mcs]

It is most likely because your includes/configure.php file is setup incorrectly.

[MrPhil]

In your configure.php files, do you have http: for the HTTP entries, and https: only for the HTTPS entries? To have https: for both would throw you into SSL mode once you're past the first page or so, at least if the calls are properly using the tep_href_link() call to build the URL. It's possible that one or two pages that aren't behaving like the others are hard coded (not using tep_href_link() )? If it's just product listing, could a mod have changed all the product pages from NONSSL to SSL links in the tep_href_link() calls? Normally only a few pages outside of payment modules are built with 'SSL'

[Andromeda100]

I filled out the configure.php correct. Where secure with https.// otherwise http://

 

I think it's a problem of splitpage.results. For example I found this line in includes/classes/ split_page_results.php

 

if (($this->current_page_number < $this->number_of_pages) && ($this->number_of_pages != 1)) $display_links_string .= ' <a href="' . tep_href_link(basename($PHP_SELF), $parameters . 'page=' . ($this->current_page_number + 1), $request_type) . '" class="pageResults" title=" ' . PREVNEXT_TITLE_NEXT_PAGE . ' "><u>' . PREVNEXT_BUTTON_NEXT . '</u></a> ';

 

Here is a redirection to https:// But why? I added NOSSL at the end but the redirection is also https://

[MrPhil]

The $request_type parameter already there should be "SSL" or "NONSSL". This is set in application_top.php:

// set the type of request (secure or not)
$request_type = (getenv('HTTPS') == 'on') ? 'SSL' : 'NONSSL';

Is your code different? I've seen cases where this code had to be changed (different environment variable name, or different value returned by getenv()), but it would have to be very unusual circumstances for it to return SSL when it should be NONSSL. Anyway, that's what I'd pursue -- is $request_type SSL in cases when it should be NONSSL, and did application_top.php create it correctly?

[Andromeda100]

Thank you! :) The code was different. I don't know why. :)

Now it's working without SSL in product listing.