SSL Issue / Help

[Andrew-Brown]

I am pulling my hair out trying to figure this out, so I really hope somehere here can help me.

I have a shared SSL hosting provider. The web host administrator is a friend of mine, so with his help we tracked down this problem.

When a user attempts to checkout, part of the page is secure, but part is not, therefore you get no padlock. What we determined to be the cause, the images are still coming from the HTTP server, not the HTTPS server; whcih is where they will need to come from in order for the page to be secure.


Here is a link to the site: http://www.creationpc.com/catalog


Here is snip of the configure.php file as well --

define('HTTP_SERVER', 'http://www.creationpc.com'); // eg, http://localhost - should not be empty for productive servers
define('HTTPS_SERVER', 'https://secure.sherpapub.com/customers/creationpc.com'); // eg, https://localhost - should not be empty for productive servers
define('ENABLE_SSL', true); // secure webserver for checkout procedure?
define('DIR_WS_CATALOG', '/catalog/'); // absolute path required
define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
#define('DIR_FS_DOCUMENT_ROOT', $HTTP_SERVER_VARS['DOCUMENT_ROOT']); // where your pages are located on the server. if $DOCUMENT_ROOT doesnt suit you, replace with your local path. (eg, /usr/local/apache/htdocs)
define('DIR_FS_DOCUMENT_ROOT', '/home/itaxis/creationpc.com/www/'); // where your pages are located on the server. if $DOCUMENT_ROOT doesnt suit you, replace with your local path. (eg, /usr/local/apache/htdocs)
define('DIR_FS_CATALOG', DIR_FS_DOCUMENT_ROOT . DIR_WS_CATALOG);
define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');


Any suggestions, ideas, or help would be great!

Thanks!

[doug]

I think I have read about this problem before and the answer then was to have a copy of the images in the HTTPS relevant directory(or was it just to have symbolic link from the HTTPS directory images to the real images), I can't remember exactly.

I am trying to use a shared SSL host but have a problem that you apparently don't have, does your php.ini have safe mode turned on or off?

[michael_s]

Looks like you solved the problem. I went through a partial checkout, and your SSL looks like it is working properly.

[doug]

Yes, we are on the right track, I have asked them for a explanation of what they had to change so it might be used as a tip?

Now all I have to get right is the images in HTTPS mode!

[BirddogsGarage]

Did you ever figure out how to get the images in HTTPS Mode????
This is my problem right now and I cant figure out where I am going wrong!

[phaseiii]

Originally Posted by BirddogsGarage

Did you ever figure out how to get the images in HTTPS Mode????
This is my problem right now and I cant figure out where I am going wrong!

After browsing through the code, I found that the problem rests with $request_type not being set properly. The $request_type variable is initialized in "includes/application_top.php" on line 41 (assuming you haven't modified this file at all).

Either comment or take out the line that says:
$request_type = (getenv('HTTPS') == 'on') ? 'SSL' : 'NONSSL';

and replace it with:
$request_type = (getenv('SERVER_PORT') == '443' ? 'SSL' : 'NONSSL');

This should fix the problem.

What gets even better is just when I was about to look into fixing this issue on the admin side, I found this thread.

DOH!

So much for schools being named after me, and anyone throwing me a parade.