implement SSL on shared space

[Guest]

Hi, i'm using OSC 2.2 cvs from about november, i want to implement SSL (on shared space) on my create_account page and other after that.

Does anyone know where i can get instructions for this?

Or could someone tell me if its easy :?

thanks

 

Caspar Fyers

 

www.fyersart.com

[chfields]

you need to go to your configure.php files in catalog and admin and enable ssl and then put in the correct url.

[Guest]

right ok, which files in the catalog do i put in the ssl space?

i heard there can be problems with shared space, unless i use milestone 2 i think

 

Caspar

[chfields]

You should just need to change your config file. You may need to ask your host. I don't have to move any files for SSL. here is a copy of my config

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'http://mrsfieldsgoodies.com'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'https://host73.ipowerweb.com/~mrsfield'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('DIR_WS_CATALOG', '/'); // absolute path required

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');

define('DIR_FS_DOCUMENT_ROOT', $HTTP_SERVER_VARS['DOCUMENT_ROOT']);

define('DIR_FS_CATALOG', DIR_FS_DOCUMENT_ROOT . DIR_WS_CATALOG);

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

[Guest]

ok, i tried that so my config looks like this:

  define('HTTP_SERVER', 'http://www.fyersart.com'); // eg, http://localhost - should not be NULL for productive servers

 define('HTTPS_SERVER', 'https://vault2.secured-url.com/fyers/'); // eg, https://localhost - should not be NULL for productive servers

 define('ENABLE_SSL', true); // secure webserver for checkout procedure?

 define('DIR_WS_CATALOG', '/'); // absolute path required

 define('DIR_WS_IMAGES', 'catalog/images/');

 define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

 define('DIR_WS_INCLUDES', 'includes/'); // If "URL fopen wrappers" are enabled in PHP (which they are in the default configuration), this can be a URL instead of a local pathname

 define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

 define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

 define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

 define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

 define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');



define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');

define('DIR_FS_DOCUMENT_ROOT', $HTTP_SERVER_VARS['DOCUMENT_ROOT']);

define('DIR_FS_CATALOG', DIR_FS_DOCUMENT_ROOT . DIR_WS_CATALOG);

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

then when i go to create an account it comes up with this:

 

Warning: Unknown(e:sslrootfyersaccount.php): failed to create stream: No such file or directory in Unknown on line 0

 

Warning: Unknown(): Failed opening 'e:sslrootfyersaccount.php' for inclusion (include_path='.;c:php4pear') in Unknown on line 0

 

any ideas?

[Guest]

i've just moved all my catalog files to the ssl space, and now if you click on 'my account' it comes up with this error:

FATAL ERROR: register_globals is disabled in php.ini, please enable it!

 

how can i fix this? i dont have access to the php.ini :cry: [/code]

[Guest]

You need to ask your host to do this for you!

[Guest]

Also you can try this yourself.

 

http://www.oscommerce.com/forums/viewtopic.php...p=197781#197781

 

 

HTH :D

[Guest]

Hi, thanks for that.

i have spoken to my hosting company, and they told me they wont change the php.ini file for security reasons or something, and the .htaccess file has many features disabled, including php_value register_globals 1.

They did say however, there is a way round it.. but they wont offer anymore help than that!

Does anyone know how?????? (tearing hair out!) :?

[Guest]

You dont have to put your files on your secure side

the configure.php that you posted should be ok except for your path:

define('HTTPS_SERVER', 'https://vault2.secured-url.com/fyers/'); // eg, https://localhost - should not be NULL for productive servers

ask your provider to make sure but it should be like this:

define('HTTPS_SERVER', 'https://vault2.secured-url.com/~fyers/'); // eg, https://localhost - should not be NULL for productive servers [quote]

Look at the ~ in front of fyres

 

HTH

The_Bear

[Guest]

thanks for all your input The_Bear, it was your comment in the My Store forum that made me think :)

Yes it's definatly without the '~', i did think that was a little weird, so i double checked.

Can you recommend any cheap SSL providers which will work for what i need? I did look, but not with much luck.

Also possibly one with the ability to use the Verisign secure site seal?

thanks again

 

Caspar