which files/directories to https

[cliffsmoke]

On my webserver i have 2 choises: store my files in a folder HTTP or in another folder HTTPS (where the SSL files should be located).

 

My question: which files/folders do I have to put in the HTTPS folder. I think it is not neccesary to put all my oscommerce files in the HTTPS folder, but only the php files which should be secured...

 

can u help me?? thx, cliff :)

[♥Vger]

Your includes/configure.php file should look something like this, if you have a full ssl certificate. If you are using a shared sll then the path would be different.

<?php
/*
 osCommerce, Open Source E-Commerce Solutions
 http://www.oscommerce.com

 Copyright (c) 2003 osCommerce

 Released under the GNU General Public License
*/

// Define the webserver and path parameters
// * DIR_FS_* = Filesystem directories (local/physical)
// * DIR_WS_* = Webserver directories (virtual/URL)
 define('HTTP_SERVER', 'http://www.yourdomain.com'); // eg, http://localhost - should not be empty for productive servers
 define('HTTPS_SERVER', 'https://yourdomain.com'); // eg, https://localhost - should not be empty for productive servers
 define('ENABLE_SSL', true); // secure webserver for checkout procedure?
 define('HTTP_COOKIE_DOMAIN', 'www.yourdomain.com');
 define('HTTPS_COOKIE_DOMAIN', 'https://yourdomain.com');
 define('HTTP_COOKIE_PATH', '/oscommerce');
 define('HTTPS_COOKIE_PATH', '/oscommerce');
 define('DIR_WS_HTTP_CATALOG', '/oscommerce/');
 define('DIR_WS_HTTPS_CATALOG', '/oscommerce/');
 define('DIR_WS_IMAGES', 'images/');
 define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
 define('DIR_WS_INCLUDES', 'includes/');
 define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
 define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
 define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
 define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
 define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');
 define('DIR_FS_CATALOG', '/var/www/html/oscommerce/');
 define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
 define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

// define our database connection
 define('DB_SERVER', 'localhost'); // eg, localhost - should not be empty for productive servers
 define('DB_SERVER_USERNAME', 'your user name in here');
 define('DB_SERVER_PASSWORD', 'your password in here');
 define('DB_DATABASE', 'your_domain_com_-_oscommerce');
 define('USE_PCONNECT', 'false'); // use persistent connections?
 define('STORE_SESSIONS', 'mysql'); // leave empty '' for default handler or set to 'mysql'
?>

Before you attempt to alter this file you need to chmod it to 644, and when you have finished altering it you need to chmod it back to 400.

 

Hope this helps - Vger