SSL - Another Bug

[xtremelyfit]

I've discovered another problem with my SSL. Whenever I try to checkout without having first logged in (by clicking on checkout) it takes me to a non-secure login page. But if I login first - the login page is secure.

 

Additionally, when I click on "continue" after putting in the credit card number, it takes me to a non-secure confirmation page. In other words, the page where I put in the number is secure, but the next page is not. This happens consistently, but in checking the code I can see no reason for it. You can see my site at www.xtremelyfit.com to see what I mean.

 

I am using a shared certificate with my cart files on both a non secure and a secure server.

 

I haven't seen this particular problem addressed on the forum.

[xtremelyfit]

any help at all?

[Guest]

Must be a configure.php problem cause if i click on "create an account" it should bring me to the secure page and it does not !

 

The_Bear

[xtremelyfit]

That's because I took it out of SSL enabled mode for a few minutes testing something else. If you don't mind try it again.

 

Thanks

[xtremelyfit]

Hey, Bear. Doesn't the problem have to be in this code from the checkout_process.php file?

 

// if the customer is not logged on, redirect them to the login page

if (!tep_session_is_registered('customer_id')) {

$navigation->set_snapshot(array('mode' => 'SSL', 'page' => FILENAME_CHECKOUT_PAYMENT));

tep_redirect(tep_href_link(FILENAME_LOGIN, '', 'SSL'));

}

 

 

I tried adding , true after 'SSL' but that didn't help. But isn't this where it is happening?