403 Forbidden error

[Anonymous]

I've set up MS2 Max 1.5 using a shared SSL setup.

While attempting to login to an existing account using MSIE, I get the dreaded "403 Forbidden error'. What happens is that instead of going to

https://secure.domain.com/~username/catalog/index.php

the login is directed to

https://secure.domain.com/catalog/index.php

Is there any way to fix this?

If I use Netscape, I get a successful login.

Thanks!

[Anonymous]

Hi,
Have had numerous difficulties with using shared SSL server. One of the main problems was user could sign up successfully for an account, but when they logged in, they were taken to the wrong URL as described above and were unable to proceed.

Looked around quite a bit in the various forums for a solution. Tried changing tep_redirect in general.php and in login.php as suggested in the forums. However, it finally seemed to come down to the proper setup in the configure.php file.

The format below for setting up my shared SSL on my shared server is provided below. This is the only thing that worked for me. Hopefully, this will help others. This configuration worked only after going back to the original installation of general.php and login.php.

<?php
/*
osCommerce, Open Source E-Commerce Solutions
http://www.oscommerce.com

Copyright (c) 2003 osCommerce

Released under the GNU General Public License
*/

// Define the webserver and path parameters
// * DIR_FS_* = Filesystem directories (local/physical)
// * DIR_WS_* = Webserver directories (virtual/URL)
define('HTTP_SERVER', 'http://www.yourdomain.com'); // eg, http://localhost - should not be empty for productive servers
define('HTTPS_SERVER', 'https://secure.domain.com/~username'); // eg, https://localhost - should not be empty for productive servers
define('ENABLE_SSL', true); // secure webserver for checkout procedure?
define('HTTP_COOKIE_DOMAIN', 'www.yourdomain.com');
define('HTTPS_COOKIE_DOMAIN', 'secure.domain.com/~username');
define('HTTP_COOKIE_PATH', '/catalog/');
define('HTTPS_COOKIE_PATH', '/catalog/');
define('DIR_WS_HTTP_CATALOG', '/catalog/');
define('DIR_WS_HTTPS_CATALOG', '/catalog/');
define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

//Added for BTS1.0
define('DIR_WS_TEMPLATES', 'templates/');
define('DIR_WS_CONTENT', DIR_WS_TEMPLATES . 'content/');
define('DIR_WS_JAVASCRIPT', DIR_WS_INCLUDES . 'javascript/');
//End BTS1.0
define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');
define('DIR_FS_CATALOG', '/your/path/to/catalog/');
define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

// define our database connection
define('DB_SERVER', 'localhost'); // eg, localhost - should not be empty for productive servers
define('DB_SERVER_USERNAME', 'your_user_name);
define('DB_SERVER_PASSWORD', 'your_password');
define('DB_DATABASE', 'your_database_name');
define('USE_PCONNECT', 'false'); // use persistent connections?
define('STORE_SESSIONS', 'mysql'); // leave empty '' for default handler or set to 'mysql'