osCommerce and osCMax shopping cart software forums

Shopping Cart Software

osCommerce with teeth!

 
 

admin login and https

This is a discussion on admin login and https within the osCommerce 2.2 Modification Help forums, part of the osCommerce 2.2 Forums category; Hi folks, i have used .htaccess to protect the /catalog/admin directory. I have tried logging in under https and i ...


Go Back   osCommerce and osCMax shopping cart software forums > osCommerce 2.2 Forums > osCommerce 2.2 Modification Help

Register FAQ Members List Calendar Mark Forums Read


Free community membership! Fast easy FREE membership
Closed Thread

 

LinkBack Thread Tools
  #1  
Old 02-03-2003, 09:19 AM
New Member
 
Join Date: Feb 2003
Posts: 7
Thanks: 0
Thanked 0 Times in 0 Posts
Rep Power: 0
MikeF
Default admin login and https

Hi folks,
i have used .htaccess to protect the /catalog/admin directory. I have tried logging in under https and i can. The problem is the links on the admin interface are http and not https. Should I be able to or is there a way to stay on the secure server or https the whole time you are in the admin?
__________________
Have a GREAT day!
MikeF
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Sponsored Links
Advertisement
  #2  
Old 02-07-2003, 12:22 PM
New Member
 
Join Date: Feb 2003
Posts: 7
Thanks: 0
Thanked 0 Times in 0 Posts
Rep Power: 0
MikeF
Default Re: admin login and https

Just a friendly and hopeful bump.
Quote:
Originally Posted by MikeF
Hi folks,
i have used .htaccess to protect the /catalog/admin directory. I have tried logging in under https and i can. The problem is the links on the admin interface are http and not https. Should I be able to or is there a way to stay on the secure server or https the whole time you are in the admin?
__________________
Have a GREAT day!
MikeF
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
  #3  
Old 02-07-2003, 12:37 PM
michael_s's Avatar
osCMax Developer

 
Join Date: Jul 2002
Location: Phoenix, AZ
Posts: 11,070
Thanks: 81
Thanked 348 Times in 327 Posts
Rep Power: 10
michael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond repute
Default

In the /admin/includes/configure.php change the following to say https://yoursite.com :

Code:
define('HTTP_SERVER', 'https://yoursite.com'); // eg, http://localhost or - https://localhost should not be NULL for productive servers
SSL enabled.
__________________
Michael Sasek
osCMax Developer


  • osCMax Templates - Hundreds of premium quality templates designed for osCMax 2. Loyalty discounts up to 30% off!
    Each purchase supports the osCMax project with much needed funds!

  • xShop for osCMax - Windows Based osCMax administration. Improved workflow, security, speed and convenience.

  • osCMax Hosting - From basic hosting to High Availability, Load Balanced arrays, the most experienced osCMax host. Default multi server configuration for exceptional performance!

  • osCMax Template Tutorial - Learn how to make your own custom templates and how to use the powerful features of the osCMax template system.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
  #4  
Old 02-07-2003, 02:44 PM
New Member
 
Join Date: Feb 2003
Location: USA
Posts: 7
Thanks: 0
Thanked 0 Times in 0 Posts
Rep Power: 0
abarnes
Default maybe a bug?

I am having the same problem with https except I have it in the config pointing to https.

If I type the address with https in the browser i get the ssl lock icon. however if i just type the address it doesn't go into ssl mode.

I read one of the posts that said make the regular server point to ssl and it will work, but that didn't work for me either.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
  #5  
Old 02-07-2003, 06:19 PM
New Member
 
Join Date: Feb 2003
Posts: 7
Thanks: 0
Thanked 0 Times in 0 Posts
Rep Power: 0
MikeF
Default

Yes I have checked that a couple of times. I have set correctly in that file and the catalog/includes/configure.php

Code:
define('HTTP_SERVER', 'http://store.agileservers.net/catalog'); // eg, http://localhost - should not be NULL for productive servers
  define('HTTPS_SERVER', 'https://secure10.vosn.net/~agileser/store/catalog'); // eg, https://localhost - should not be NULL for productive servers
  define('ENABLE_SSL', true); // secure webserver for checkout procedure?
The links on the admin main page all still reference non-ssl links. I can login in under https just fine, but all the links on the main admin page are non ssl.
what do you think?

Quote:
Originally Posted by msasek
In the /admin/includes/configure.php change the following to say https://yoursite.com :

Code:
define('HTTP_SERVER', 'https://yoursite.com'); // eg, http://localhost or - https://localhost should not be NULL for productive servers
SSL enabled.
__________________
Have a GREAT day!
MikeF
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
  #6  
Old 02-07-2003, 11:26 PM
michael_s's Avatar
osCMax Developer

 
Join Date: Jul 2002
Location: Phoenix, AZ
Posts: 11,070
Thanks: 81
Thanked 348 Times in 327 Posts
Rep Power: 10
michael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond reputemichael_s has a reputation beyond repute
Default

MikeF,

If the example you posted is the code you have in your actual config, you have NOT done what I said. Look closely, I have changed the HTTP_SERVER to point to a https link. Do it and it will work for you.

You have to change the :

Code:
define('HTTP_SERVER', 'http://store.agileservers.net/catalog');
To

Code:
define('HTTP_SERVER', 'https://secure10.vosn.net/~agileser');
Also note that you should not have the /catalog subdirectory specified in these areas. That is incorrect, only the base url.
__________________
Michael Sasek
osCMax Developer


  • osCMax Templates - Hundreds of premium quality templates designed for osCMax 2. Loyalty discounts up to 30% off!
    Each purchase supports the osCMax project with much needed funds!

  • xShop for osCMax - Windows Based osCMax administration. Improved workflow, security, speed and convenience.

  • osCMax Hosting - From basic hosting to High Availability, Load Balanced arrays, the most experienced osCMax host. Default multi server configuration for exceptional performance!

  • osCMax Template Tutorial - Learn how to make your own custom templates and how to use the powerful features of the osCMax template system.
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
  #7  
Old 02-08-2003, 09:02 AM
New Member
 
Join Date: Feb 2003
Posts: 7
Thanks: 0
Thanked 0 Times in 0 Posts
Rep Power: 0
MikeF
Default

Thank you very much for all your help!

Here are my settings so maybe this will help others as well. At this minute things seem to be working ok. These settings permit me to login to the admin under https and it stays in https all through the admin. The Catalog seems to work correctly and there is https in the "Checkout" and Customers login:

For catalog/admin/includes/configure.php

Code:
define('HTTP_SERVER', 'https://secure10.vosn.net/~agileser'); // eg, http://localhost or - https://localhost should not be NULL for productive servers
  define('HTTP_CATALOG_SERVER', 'http://store.agileservers.net/catalog');
  define('HTTPS_CATALOG_SERVER', 'https://secure10.vosn.net/~agileser');
  define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module
  define('DIR_FS_DOCUMENT_ROOT', '/home/agileser/public_html/store'); // where the pages are located on the server
  define('DIR_WS_ADMIN', '/catalog/admin/'); // absolute path required
  define('DIR_FS_ADMIN', '/home/agileser/public_html/store/catalog/admin/'); // absolute path required
  define('DIR_WS_CATALOG', '/'); // absolute path required changed from /catalog/ on 9:51 PM 1/24/2003 by mikef
  define('DIR_FS_CATALOG', '/home/agileser/public_html/store/catalog/'); // absolute path required
For catalog/includes/configure.php

Code:
define('HTTP_SERVER', 'http://store.agileservers.net/catalog'); // eg, http://localhost - should not be NULL for productive servers
  define('HTTPS_SERVER', 'https://secure10.vosn.net/~agileser/store/catalog'); // eg, https://localhost - should not be NULL for productive servers
  define('ENABLE_SSL', 'true'); // secure webserver for checkout procedure?
  define('DIR_WS_CATALOG', '/'); // absolute path required changed from /catalog/ on 9:51 PM 1/24/2003 by mikef
__________________
Have a GREAT day!
MikeF
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
  #8  
Old 03-11-2003, 01:15 PM
New Member
 
Join Date: Feb 2003
Posts: 7
Thanks: 0
Thanked 0 Times in 0 Posts
Rep Power: 0
MikeF
Default durn it..admin login under https woes still.

Quote:
Originally Posted by MikeF
Thank you very much for all your help!

Here are my settings so maybe this will help others as well. At this minute things seem to be working ok. These settings permit me to login to the admin under https and it stays in https all through the admin. The Catalog seems to work correctly and there is https in the "Checkout" and Customers login:

For catalog/admin/includes/configure.php

Code:
define('HTTP_SERVER', 'https://secure10.vosn.net/~agileser'); // eg, http://localhost or - https://localhost should not be NULL for productive servers
  define('HTTP_CATALOG_SERVER', 'http://store.agileservers.net/catalog');
  define('HTTPS_CATALOG_SERVER', 'https://secure10.vosn.net/~agileser');
  define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module
  define('DIR_FS_DOCUMENT_ROOT', '/home/agileser/public_html/store'); // where the pages are located on the server
  define('DIR_WS_ADMIN', '/catalog/admin/'); // absolute path required
  define('DIR_FS_ADMIN', '/home/agileser/public_html/store/catalog/admin/'); // absolute path required
  define('DIR_WS_CATALOG', '/'); // absolute path required changed from /catalog/ on 9:51 PM 1/24/2003 by mikef
  define('DIR_FS_CATALOG', '/home/agileser/public_html/store/catalog/'); // absolute path required
For catalog/includes/configure.php

Code:
define('HTTP_SERVER', 'http://store.agileservers.net/catalog'); // eg, http://localhost - should not be NULL for productive servers
  define('HTTPS_SERVER', 'https://secure10.vosn.net/~agileser/store/catalog'); // eg, https://localhost - should not be NULL for productive servers
  define('ENABLE_SSL', 'true'); // secure webserver for checkout procedure?
  define('DIR_WS_CATALOG', '/'); // absolute path required changed from /catalog/ on 9:51 PM 1/24/2003 by mikef
Well I lied about those settings. I can login ok with https and links in the admin interface reflect https but when i clcik on them I get error 404's like:
Not Found
"The requested URL /~agileser/catalog/admin/categories.php was not found on this server.

Additionally, a 404 Not Found error was encountered while trying to use an ErrorDocument to handle the request."
I checked and that file, categories.php is in that dir.


For the above error this was the link in the admin interface. https://secure10.vosn.net/~agileser/...ed_box=catalog


My settings for includes/admin/configure.php are:

// Define the webserver and path parameters
// * DIR_FS_* = Filesystem directories (local/physical)
// * DIR_WS_* = Webserver directories (virtual/URL)
define('HTTP_SERVER', 'https://secure10.vosn.net/~agileser'); // eg, http://localhost or - https://localhost should not be NULL for productive servers
define('HTTP_CATALOG_SERVER', 'http://store.agileservers.net/catalog');
define('HTTPS_CATALOG_SERVER', 'https://secure10.vosn.net/~agileser');
define('ENABLE_SSL_CATALOG', 'true'); // secure webserver for catalog module
define('DIR_FS_DOCUMENT_ROOT', '/home/agileser/public_html/store'); // where the pages are located on the server
define('DIR_WS_ADMIN', '/catalog/admin/'); // absolute path required
define('DIR_FS_ADMIN', '/home/agileser/public_html/store/catalog/admin/'); // absolute path required
define('DIR_WS_CATALOG', '/'); // absolute path required changed from /catalog/ on 9:51 PM 1/24/2003 by mike foate
define('DIR_FS_CATALOG', '/home/agileser/public_html/store/catalog/'); // absolute path required
define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
define('DIR_WS_CATALOG_IMAGES', DIR_WS_CATALOG . 'images/');
define('DIR_WS_INCLUDES', 'includes/');
define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');
define('DIR_WS_CATALOG_LANGUAGES', DIR_WS_CATALOG . 'includes/languages/');
define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');
define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');
define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');
define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');

My settings for /includes/configure.php are:

// Define the webserver and path parameters
// * DIR_FS_* = Filesystem directories (local/physical)
// * DIR_WS_* = Webserver directories (virtual/URL)
define('HTTP_SERVER', 'http://store.agileservers.net/catalog'); // eg, http://localhost - should not be NULL for productive servers
define('HTTPS_SERVER', 'https://secure10.vosn.net/~agileser'); // eg, https://localhost - should not be NULL for productive servers
define('ENABLE_SSL', 'true'); // secure webserver for checkout procedure?
define('DIR_WS_CATALOG', '/'); // absolute path required changed from /catalog/ on 9:51 PM 1/24/2003 by mike foate
define('DIR_WS_IMAGES', 'images/');
define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');
define('DIR_WS_INCLUDES', 'includes/'); // If "URL fopen wrappers" are enabled in PHP (which they are in the default configuration), this can be a URL instead of a local pathname
define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');
define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');
define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');
define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');
define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

define('DIR_WS_DOWNLOAD_PUBLIC', DIR_WS_CATALOG . 'pub/');
define('DIR_FS_DOCUMENT_ROOT', '/home/agileser/public_html/store');
define('DIR_FS_CATALOG', '/home/agileser/public_html/store/catalog/');
define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');
define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');
__________________
Have a GREAT day!
MikeF
Digg this Post!Add Post to del.icio.usBookmark Post in TechnoratiFurl this Post!
Sponsored Links
Advertisement
Closed Thread

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Similar Threads

Thread Thread Starter Forum Replies Last Post
https:// Admin redirects to http:// driwashsolutions osCMax v2 Installation issues 3 01-23-2006 07:41 PM
Admin Login Problem - my customer can't login, I can pram0310 osCMax v1.7 Installation 2 10-29-2004 11:46 AM
Well crap... admin login not allowing login-no errors tauras911 osCMax v1.7 Installation 2 07-07-2004 12:12 AM
https when accessing Admin pages NickW osCommerce 2.2 Installation Help 1 02-09-2004 06:32 AM
admin login goes https to http??? john- osCMax v1.7 Discussion 2 12-23-2003 07:19 AM


All times are GMT -8. The time now is 05:23 PM.


Powered by vBulletin®
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
SEO by vBSEO
http://www.oscmax.com/forums/
Copyright 2008 osCMax