Post by hm2k » Thu Nov 20, 2008 4:02 am

That's odd.

It might be an idea to change the check in opencart to just check that HTTPS is set at all, rather than checking if it's on.

I've never seen HTTPS return anything other than 'on'.

UK Web Hosting


User avatar
Global Moderator

Posts

Joined
Tue Mar 11, 2008 9:06 am
Location - UK

Post by joegolike » Thu Nov 20, 2008 4:26 am

Is the check in OpenCart looking for the string "on"? As far as boolean values go, 1 has long been used to mean TRUE and 0 FALSE.

New member

Posts

Joined
Fri May 23, 2008 3:42 pm

Post by fido-x » Thu Nov 20, 2008 5:13 am

Since HTTPS is not configured during the setup/install stage, you have to manually edit the "config.php" and "admin/config.php" files to set the url of your HTTPS server. Have you done this?

Image
Modules for OpenCart 2.3.0.2
Homepage Module [Free - since OpenCart 0.7.7]
Multistore Extensions
Store Manager Multi-Vendor/Multi-Store management tool

If you're not living on the edge ... you're taking up too much space!


User avatar
Expert Member

Posts

Joined
Sat Jun 28, 2008 1:09 am
Location - Tasmania, Australia

Post by Qphoria » Thu Nov 20, 2008 5:15 am

Yea it appears his HTTPS is set correctly.

The HTTPS, while i agree it makes sense to be '0' or '1' is actually either 'on' or not defined at all.
So technically if the check is just changed to "isset" then that should be safe.

Image


User avatar
Administrator

Posts

Joined
Tue Jul 22, 2008 3:02 am

Post by joegolike » Thu Nov 20, 2008 5:18 am

Yes. SSL wouldn't work at all if I hadn't done this. Here's the excerpt from config.php:

Code: Select all

// HTTPS
define('HTTPS_SERVER', 'https://www.rachelburklund.com/store/');
define('HTTPS_IMAGE', 'https://www.rachelburklund.com/store/image/');

New member

Posts

Joined
Fri May 23, 2008 3:42 pm

Post by bosse » Mon Dec 22, 2008 7:53 pm

Was this problem solved?
I also have the same problem.
What is the solution?
I am using 0.7.9- RC5.  ???

Moreover, it is not possible to log out completely.
Last edited by bosse on Mon Dec 22, 2008 8:26 pm, edited 1 time in total.

Newbie

Posts

Joined
Sun Dec 07, 2008 12:23 am

Post by Qphoria » Mon Dec 22, 2008 9:20 pm

bosse wrote: Was this problem solved?
I also have the same problem.
What is the solution?
I am using 0.7.9- RC5.  ???

Moreover, it is not possible to log out completely.
Can you check your phpinfo from admin->configuration->server info
and find the setting "HTTPS" is the value a "1" or "on"

And what does it mean you can't logout "completely"?

Image


User avatar
Administrator

Posts

Joined
Tue Jul 22, 2008 3:02 am

Post by bosse » Mon Dec 22, 2008 10:19 pm

http://megane.opencart.jp/shop/home

please access to test site.

user:testtest.co@gmails.com
pass:1234

You can access my accunt without the password even if it logs out after you log in it in once.

I am looking for setting "HTTPS" now.

Newbie

Posts

Joined
Sun Dec 07, 2008 12:23 am

Post by hm2k » Mon Dec 22, 2008 10:23 pm

Can you show us your phpinfo()?

Thanks.

UK Web Hosting


User avatar
Global Moderator

Posts

Joined
Tue Mar 11, 2008 9:06 am
Location - UK

Newbie

Posts

Joined
Sun Dec 07, 2008 12:23 am

Post by bosse » Mon Dec 22, 2008 10:47 pm

I was not found the setting of https.
Please inform me if there is necessary information.

bosse

Newbie

Posts

Joined
Sun Dec 07, 2008 12:23 am

Post by bruce » Mon Dec 22, 2008 10:48 pm

registered php streams (in your phpinfo) should include https

Active Member

Posts

Joined
Wed Dec 12, 2007 2:26 pm

Post by bosse » Mon Dec 22, 2008 11:52 pm

I wish to express my gratitude for help of everybody.
The setting of my shop/config.php and index.php is as follows.

The problem of my SSL is not solved.

config.php

Code: Select all

// HTTPS
define('HTTPS_BASE', 'https://ssl63.heteml.jp/bosse/megane/shop/');
define('HTTPS_ADMIN', HTTPS_BASE.'admin/');
define('HTTPS_SERVER', (APP == 'ADMIN')?HTTPS_ADMIN:HTTPS_BASE);
define('HTTPS_IMAGE', HTTPS_BASE?HTTPS_BASE.'https://ssl63.heteml.jp/bosse/megane/shop/image/':'');
index.php

Code: Select all

// Base URL
if (@$_SERVER['HTTPS'] != 'on') {
  $config->set('OPENCART_HTTPBASE',HTTP_SERVER);
  $template->set('base', HTTP_SERVER);
} else {
  $config->set('OPENCART_HTTPBASE',HTTPS_SERVER);
  $template->set('base', HTTPS_SERVER);
}

Newbie

Posts

Joined
Sun Dec 07, 2008 12:23 am

Post by Qphoria » Mon Dec 22, 2008 11:55 pm

Sorry we aren't being clear enough.

Please upload the attached file to the root of your website and give us the link to your site.

so if your website is http://www.mysite.com
then we should be able to access http://www.mysite.com/phpinfo.php

Attachments

[The extension has been deactivated and can no longer be displayed.]


Image


User avatar
Administrator

Posts

Joined
Tue Jul 22, 2008 3:02 am

Post by bosse » Tue Dec 23, 2008 12:06 am


Newbie

Posts

Joined
Sun Dec 07, 2008 12:23 am

Post by bosse » Tue Dec 23, 2008 12:16 am

I add 3 information of server .

The following code is added to .htaccess to use Opencart
by the server.

Code: Select all

AddHandler php5-script .php

# Uncomment this to ensure that register_globals is Off
#php_flag register_globals Off

# URL Alias - see install.txt............
This server can change the setting of php.in.

This SSL is sharing.

Newbie

Posts

Joined
Sun Dec 07, 2008 12:23 am

Post by Qphoria » Tue Dec 23, 2008 1:13 am

OpenCart doesn't support sharedSSL at this time. Which also explains why when you log out, it doesn't really log you out. OpenCart isn't maintaining variables between the main domain and the shared ssl domain.

It is something we are certainly looking to add in the next version, as I also use SharedSSL in some cases

Image


User avatar
Administrator

Posts

Joined
Tue Jul 22, 2008 3:02 am

Post by bosse » Tue Dec 23, 2008 9:29 am

I change SSL use to Yes.  login mail:testtest.co@gmails.com    pass.1234
I expect the next version.

Newbie

Posts

Joined
Sun Dec 07, 2008 12:23 am

Post by Qphoria » Tue Dec 23, 2008 9:39 am

i mean next version as 0.8.. not 0.7.9.. so it will be a few months

Image


User avatar
Administrator

Posts

Joined
Tue Jul 22, 2008 3:02 am

Post by bosse » Tue Dec 23, 2008 10:12 am

OK! thanks.  ;)

Only one question.

Will all Shared SSL be the same phenomenon?

http://www.resellerzoom.com/ is Shared SSL too. Private SSL is an option.
Last edited by bosse on Tue Dec 23, 2008 10:35 am, edited 1 time in total.

Newbie

Posts

Joined
Sun Dec 07, 2008 12:23 am
Who is online

Users browsing this forum: No registered users and 31 guests