I think it's an SSL issue...

[goaskmom]

I've been running a stock Max 1.7 version for about 18 months now, I guess. Finally decided to go to SSL since I added credit cards instead of PayPal.

The certificate is installed, but a couple of issues are happening. First, when you sign in, it switches to SSL mode, but when you start looking at the catalog, the SSL goes off. When you check out, it's back, when looking, it's off. That's issue number 1.

Issue number two is that items on special can be put into the cart if you are not logged in and they stay the right price (sale price). If you purchase without account, it seems to keep it correct. However, if you log in, the specials prices don't transfer to the shopping cart.

I suspect the second issue is because of the initial problem in problem #1 with the SSL not being set up correctly. In the instructions on the wiki, the file seems to have a line or two I don't have in my configure files.

Here's what I have for the catalog/includes/configure.php file (with mydomain being substituted for the actual domain name):
/

/ Define the webserver and path parameters
// * DIR_FS_* = Filesystem directories (local/physical)
// * DIR_WS_* = Webserver directories (virtual/URL)
  define('HTTP_SERVER', 'http://www.mydomain.com'); // eg, http://localhost - should not be empty for productive servers
  define('HTTPS_SERVER', 'https://www.mydomain.com'); // eg, https://localhost - should not be empty for productive servers
  define('ENABLE_SSL', true); // secure webserver for checkout procedure?
  define('HTTP_COOKIE_DOMAIN', 'www.mydomain.com');
  define('HTTPS_COOKIE_DOMAIN', 'www.mydomain.com');
  define('HTTP_COOKIE_PATH', '/catalog/');
  define('HTTPS_COOKIE_PATH', '/catalog/');
  define('DIR_WS_HTTP_CATALOG', '/catalog/');
  define('DIR_WS_HTTPS_CATALOG', '/catalog/');
  define('DIR_WS_IMAGES', 'images/');
  define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
  define('DIR_WS_INCLUDES', 'includes/');
  define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
  define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
  define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
  define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
  define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

And in the admin/includes/configure.php file :

// Define the webserver and path parameters
// * DIR_FS_* = Filesystem directories (local/physical)
// * DIR_WS_* = Webserver directories (virtual/URL)
  define('HTTP_SERVER', 'http://www.mydomain.com'); // eg, http://localhost - should not be empty for productive servers
  define('HTTP_CATALOG_SERVER', 'http://www.mydomain.com');
  define('HTTPS_CATALOG_SERVER', 'https://www.mydomain.com');
  define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module
  define('DIR_FS_DOCUMENT_ROOT', '/home/httpd/vhosts/mydomain.com/httpdocs/catalog/'); // where the pages are located on the server
  define('DIR_WS_ADMIN', '/catalog/admin/'); // absolute path required
  define('DIR_FS_ADMIN', '/home/httpd/vhosts/mydomain.com/httpdocs/catalog/admin/'); // absolute pate required
  define('DIR_WS_CATALOG', '/catalog/'); // absolute path required
  define('DIR_FS_CATALOG', '/home/httpd/vhosts/mydomain.com/httpdocs/catalog/'); // absolute path required
  define('DIR_WS_IMAGES', 'images/');
  define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
  define('DIR_WS_CATALOG_IMAGES', DIR_WS_CATALOG . 'images/');
  define('DIR_WS_INCLUDES', 'includes/');
  define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
  define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
  define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
  define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
  define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
  define('DIR_WS_CATALOG_LANGUAGES', DIR_WS_CATALOG . 'includes/languages/');
  define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');
  define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');
  define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');
  define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');

Any idea what's missing or wrong? Many thanks, in advance, as I know this is an old, tired subject for many, but I can't find the solution.

Forgot to mention, not a shared SSL, running on my own dedicated server.

[goaskmom]

No one? Are 1.7 questions still answered by the guru's, or are they all on RC2 and not looking back? I'd love to upgrade to the latest, but I'm in a production environment, and waiting for the stable release.

[michael_s]

First, the ssl switching (from ssl to non ssl) is normal and is according to accepted SSL practice. Only pages that contian sensitive info require ssl, therefore, those are the only pages that are encrypted. This speeds your site and reduces server overhead, without compromising security.

You do not need to encrypt your product pages. Nothing worth encrypting is on those pages.

I think specials need to be assigned to a customer group. It has been over a year since I used a 1.7 store, so my memory on the subject is a bit rusty...

[goaskmom]

Thanks Michael, I appreciate that. Maybe someone else can remember about the specials. There are only two items on the "special" setup. Price and expiration. No place for customer groups. I do know I have used specials for the entire time I have run the site, and it only started dropping the special pricing. A customer brought it to my attention, and I was able to make it do the same thing. I've never had an issue with it in the past, so I'm unsure what's causing it, and the only thing that I have changed recently is installing the SSL certificate, so I assumed they were linked.

Maybe someone else has worked through it. Am I also correct is saying that RC2 is not something that you would use in a production environment yet? I'll gladly upgrade to the latest, but I didn't think it was "production" ready yet. Am I correct?

Thanks-