Post by disobedientrobot » Sun Mar 10, 2013 7:45 pm

Hello,
I've just launched a shop site (opencart 1.5.4) and we've implemented SSL. That is, I've turned on SSL in the opencart admin, and updated the two config files. The shop owner wanted to ensure that the entire site was digitally signed, so I added a line to the htaccess file to force an https rewrite:

Code: Select all

RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
It works great across the whole site... except the cart. Once you're in the cart, if you try to:
- apply a coupon code
- update the quantities
it does not work.
Entering a new value in the input box to updating the quantity refreshes the page, without updating the quantity.
Applying a coupon code also refreshes the page without adding the coupon or giving an error. It *does* however give the following message as you click 'apply voucher':
Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.

Are you sure you want to continue sending this information?
I've temporarily taken out the https rewrite so that people can apply vouchers and update their baskets, but that doesn't really solve the root cause and it's not a workable solution for the shop manager -- why is it that the basket won't take SSL updates, and how can I fix this?


Posts

Joined
Sun Mar 10, 2013 7:32 pm

Post by MrPeach » Mon May 26, 2014 5:59 pm

Bump

I'm seeing the same result with SSL enabled.

Newbie

Posts

Joined
Fri Apr 11, 2014 7:25 pm

Post by cwswebdesign » Mon May 26, 2014 10:38 pm

Don't run the site with full SSL or else you'll have these other issues.

DL

This account is inactive. Look for us under the name 'EvolveWebHosting' and contact us under that username.

Thanks!


User avatar
Active Member

Posts

Joined
Sun Dec 11, 2011 12:26 am
Location - USA

Post by koka-bora » Mon Jul 28, 2014 10:01 pm

I think the question is, how to make it work with full SSL on?

I'd like to keep my site encrypted so that the end customer has better confidence that the information they enter is protected.

Newbie

Posts

Joined
Sat Jun 14, 2014 4:44 am

Post by cwswebdesign » Mon Jul 28, 2014 11:34 pm

koka-bora wrote:I think the question is, how to make it work with full SSL on?

I'd like to keep my site encrypted so that the end customer has better confidence that the information they enter is protected.
To be honest, I don't think most customers pay that much attention. Using SSL can cause other parts of your site to break and it will make your site load a lot slower. Just a few things to keep in mind.

DL

This account is inactive. Look for us under the name 'EvolveWebHosting' and contact us under that username.

Thanks!


User avatar
Active Member

Posts

Joined
Sun Dec 11, 2011 12:26 am
Location - USA
Who is online

Users browsing this forum: Bing [Bot] and 24 guests