SSL to non-SSL pages

[Guest]

After the checkout, (which is SSL) how can I make the re-direct page change to non SSL (if it is possible?)

When I go through the checkout process, all is fine, but the CHECKOUT_SUCCESS_action=update, does not re-route to a no SSL page.

Am I suppose to make the entire site SSL? I just wanted the check out area designated as SSL...anything I can do?

Thanks for any info B)

[masat]

Hi Laura,

 

For the most part everything is automatic on the switching but I guess it depends on where you want your client to go after the checkout_success.php page.

 

If you are taking them to a page outside of the cart you will definately want them to log out first for security purposes. As I understand the only way to clear a secure site is to log out or close the browser.

 

I don't know if there are any under lying repercusions but here is how you can hit continue and get nonssl:

 

Change: approx line 78 (partial line shown)

 

tep_href_link(FILENAME_CHECKOUT_SUCCESS, 'action=update', 'SSL')); ?>

 

To:

 

tep_href_link(FILENAME_CHECKOUT_SUCCESS, 'action=update', 'NONSSL')); ?>

 

Personally I would leave it alone as it is not bothering anything to go to a secure page.

 

Changeing that line to NONSSL may affect the clients secure/nonsecure session.

 

Tim

[Guest]

Hi Laura,

 

For the most part everything is automatic on the switching but I guess it depends on where you want your client to go after the checkout_success.php page.

 

If you are taking them to a page outside of the cart you will definately want them to log out first for security purposes. As I understand the only way to clear a secure site is to log out or close the browser.

 

I don't know if there are any under lying repercusions but here is how you can hit continue and get nonssl:

 

Change: approx line 78 (partial line shown)

 

tep_href_link(FILENAME_CHECKOUT_SUCCESS, 'action=update', 'SSL')); ?>

 

To:

 

tep_href_link(FILENAME_CHECKOUT_SUCCESS, 'action=update', 'NONSSL')); ?>

 

Personally I would leave it alone as it is not bothering anything to go to a secure page.

 

Changeing that line to NONSSL may affect the clients secure/nonsecure session.

 

Tim

Thank you Tim for the input, but the problem is, when all is finished (the ordering area) when you click on the "continue" button, I get a 403 error page and not redireted at all back to the main area of the site. Was wondering if this was caused because the ENTIRE site is not SSL, just the ordering section.

:)

[♥ecartz]

No, this is an error about how it handles the switch from SSL to nonSSL. There is a posted bug report and a fix. You can also usually fix this by changing the HTTP_SERVER and HTTPS_SERVER values to go to the same place and make the DIR_WS_CATALOG values the same. If you continue to experience problems, you may want to post the _SERVER and DIR_WS_ defines from your includes/configure.php file.

 

Hth,

Matt

[Guest]

No, this is an error about how it handles the switch from SSL to nonSSL. There is a posted bug report and a fix. You can also usually fix this by changing the HTTP_SERVER and HTTPS_SERVER values to go to the same place and make the DIR_WS_CATALOG values the same. If you continue to experience problems, you may want to post the _SERVER and DIR_WS_ defines from your includes/configure.php file.

 

Hth,

Matt

Thank you Matt. I'll take a look throught the "Bug reports" and see if I can find the fix.

I've been working on this for quite awhile but am still a numpity when it comes to PHP... I do backups before I dare to touch anything...but I always seem to make "something" disappear eventually :blink: