SSL is broken

[michael_s]

I am out of ideas. Does this happen to a fresh installation with no changes to it?

[midwestwebsites]

I installed a default copy of OSCMAX 1.7 and I don't know if the problem is occurring b/c I cannot seem to login to the account I created. I can login to the admin just fine but I cannot seem to login after I create an account. When I click login I get a security warning message and then get redirected right back to the login screen.

The only changes I made were removing the install directory, chmoding the configure file, and adding the product category and product so I could test things out.

Here's the link if you want to take a look. http://www.sacredaudio.com/max-default I tried searching for: 1.7 login and I didn't find anyone with the problem so I don't know how to fix this.

Thanks
Jonathan

[larry]

which programs did you remove the 'base href' from? I am having this same problem. My config.php seems to be the same as yours and the lock does not stay on the screen. I commented it out from the mainpage.tpl.php but I got the same result.

[larry]

which programs did you remove the 'base href' from? I am having this same problem. My config.php seems to be the same as yours and the lock does not stay on the screen. I commented it out from the mainpage.tpl.php but I got the same result.

[midwestwebsites]

I had spoken to soon. When I did comment that thing out it wouldn't let me login properly (I think it affected the customers too not just me but I can't remember). If you're running on 1and1, all I can say is move. Their support is innept at best and impatient at worst.

[bumpy]

Thanks Michael, as usual, for being the catcher in the code. Buuuut, though removing the line 7 in main_page.tpl.php, regarding base href, fixes the lock for viewing account.php pages, the initial login for any existing account posts the 'changing from secure to unsecured' alert. Refreshing the page brings it back to https.

[bumpy]

I am also at 1and1, and phpinfo shows register_globals on. I know there was a time when osc required this, is it still a requirement, or have the corrections been made to safe-up the code?
What else can I look for in the php variables, or the configure file settings to make this thing behave.
The site can't go live with 'You are being redirected to a site that is not secured' messages back and forth as the Customer navigates products and orders.