Upgrading security - trying to setup SSL - Wiki not clear enough (to me)...for V2.0.25

[JRR]

SSL security on the Wiki states:

Catalog Side

Edit catalog/includes/config.php
define('HTTPS_CATALOG_SERVER', 'https://yoursite.com'); define('ENABLE_SSL_CATALOG', 'true');



Admin Side

Edit catalog/youradmin/includes/config.php
define('HTTP_SERVER', 'https://yoursite.com'); define('HTTP_CATALOG_SERVER', 'http://yoursite.com'); define('HTTPS_CATALOG_SERVER', 'https://yoursite.com'); define('ENABLE_SSL_CATALOG', 'true');

However oscMax 2.0.25 uses configure.php (minor change) but does not have the lines HTTPS_CATALOG_SERVER as defined above. Rather the lines are:

My
Line
# php code

14 define('HTTP_SERVER', 'http://www.yoursite.com');
15 define('HTTPS_SERVER', 'https://www.yoursite.com');
16 define('ENABLE_SSL', true);

So my questions are - should I first comment out line 15 when I define line 16 & 17? Do I still need to add the HTTPS_CATALOG_SERVER bit along with the HTTPS_SERVER (line 15 here)?

I will also add the recommended code to login.php to force SSL even if a direct URL is used as per http://wiki.oscdox.com/forcessl?s[]=ssl

Thanks!

John :-#)#

[pgmarshall]

John,

Just change the lines so they look like the ones in the wiki. Don't comment things out unless you are told to!

osCmax will not use SSL on every page (as this is a waste of time and will slow your site down quite a bit) - it will use it on account pages, checkout, etc. where it might be needed.

So EDIT catalog/includes/configure.php from

define('HTTPS_SERVER', '');
define('ENABLE_SSL', 'false');

to

define('HTTPS_SERVER', 'https://yoursite.com');
define('ENABLE_SSL', 'true');

So EDIT catalog/admin/includes/configure.php from

define('HTTPS_CATALOG_SERVER', ''); 
define('ENABLE_SSL_CATALOG', 'false');

to

define('HTTPS_CATALOG_SERVER', 'https://yoursite.com'); 
define('ENABLE_SSL_CATALOG', 'true');

Note: the 's' at then end of the https://

Job done!

Regards,

[JRR]

Oh, right, the ADMIN (youradmin) configure.php is where that catalog_server bit hides...must read CAREFULLY the instructions, and not try in the middle of the night...

Thanks for your patience!

John :-#)#