Securing Create Account Page

[Skyline Select]

Hi,

 

I run a website at www.skylineselect.co.uk, and I want to make it possible for my customers to use a secure page when the get to entering their details.

 

This is the page that I want secured:

http://skylineselect.co.uk/catalog/create_account.php

 

This is the page on my secure server:

https://bh6.bargainhosts.co.uk/~kqrwwhom/ca...ate_account.php

 

I guess I would be most sensible to have a link on the create account page, to a duplicate page (e.g. 'create_account_secure.php'), ideally without any pictures, located on my secure server. The form would then have to check for errors (e.g. email without an '@'), before it submits it securely... to return the unsecure page 'create_account_sucess.php' or 'checkout_shipping.php'

 

 

Thanks in advance for any help.

[stevel]

You do this by setting HTTPS_SERVER in configure.php to be your base HTTPS URL and setting ENABLE_SSL to 'true'. However, I have found that osCommerce's SSL support doesn't work well when the HTTPS path contains a ~username suffix.

[Mark Evans]

Your problem is your images on the right hand side.

 

They are being called via http:// which is causing the page to not be secure.

[Skyline Select]

Thanks very much for your help.

I have almost got it working. The only problem is that the page contains pictures that are not hosted on a secure server (IE complains about this). Is there a php file that I can host on my server, that will take another picture and make it look like it's comming from my secure server on the fly?

 

Thanks again,

Iain

[skyline Select Ltd]

[Mark Evans]

Can you not simply copy the images to your server?

 

If not just hide the box on secure pages like we do for the currencies and languages box during checkout,

[Skyline Select]

Thanks...

 

I could do this, but I dont really want to. How would I hide the box on secure pages? Also, there is an image at the bottom which is part of my webstats. It is invisible, but it has to be there... I hope I can figure this out.

 

I'll now do a search for that PHP file. I'm sure I've heard of it somewhere....

[Priest]

Can you not simply copy the images to your server?

 

If not just hide the box on secure pages like we do for the currencies and languages box during checkout,

How do you hide the box on secure pages? I have been having the same problem. I got it all down to one box which is my "Live Chat" box where the dynamic image comes from an unsecure site. It's in my column_right. I'd love to be able to just hide that box on secure pages.

 

Thanks,

Priest

[Priest]

Ok, I added this to my column_right.php file:

  if ($HTTPS !='on' )

      include(DIR_WS_BOXES . 'livehelp.php');

And now it works the way I want. When the site is unsecure (http) then it displays my LiveHelp box. But when the site is secure/SSL (https) then it does not display my LiveHelp box.

 

For anyone looking at the above code strangely... yes, I know it seems backwards! I can't explain why it works, it just does.

 

:blink:

 

-Priest-