Using SSL

itmind

Not too much to say...

Offline

Posts: 1

Using SSL

« on: August 31, 2007, 02:17:50 PM »

Hi, have searched the forum but maybe I am blind or the only with this problem, how do I make a secure call to the JavaScript:

Code:

With SSL in OSCommerce.

I have change the http to https and the same with the on- / offline images, but I still get the warning box ?Unsafe elements ?? in IE when I switch to SSL.

Are I?m just doing something wrong?

Thanks
Jan


	Logged

HCL Admin

Administrator
HCL Superstar

Offline

Posts: 882

Re: Using SSL

« Reply #1 on: September 01, 2007, 05:48:59 AM »

I'm going to have the think on this one, I believe there may be some direct calls in the java itself. If so, we may need to put a http/https switch in the config to make is simple to setup. Editing the source files on 2.x is a bad idea, as every release your having to put your mods back in.


	Logged

how may I help you today?

victor

HCL Member

Offline

Posts: 266

Re: Using SSL

« Reply #2 on: September 05, 2007, 06:58:36 PM »

to make this work you should only change your config.php file

// The URL where HCL is installed
$conf['url'] = 'http://www.yourdomain.com';

Instead of using http:// change it to https://

Then generate again the code and it will be with the HTTPS included Cool


	Logged

Victor Pereyra

HCL Admin

Administrator
HCL Superstar

Offline

Posts: 882

Re: Using SSL

« Reply #3 on: September 07, 2007, 05:37:43 PM »

Let me know if the Java doesn't pick it up. IIRC, there is a spot that may give you the unsecured items error in some browsers.


	Logged

how may I help you today?

redundant

Not too much to say...

Offline

Posts: 2

Re: Using SSL

« Reply #4 on: June 28, 2008, 07:34:30 PM »

Quote from: victor link=topic=200. msg1253#msg1253 date=1189015116

to make this work you should only change your config. php file

// The URL where HCL is installed
$conf['url'] = 'hxxp: www. yourdomain. com';

Instead of using hxxp: change it to https://

Then generate again the code and it will be with the HTTPS included Cool

Hey Thanks for this. Manually changing the generated code to HTTPS:// doesn't solve the problem.

But, making this change in the config. php evidently changes some internal links, and things now work fine in IE.

Much Appreciated :)

Edit: Forgot to add to this/ask. While hunting down why IE was throwing an error, I narrowed it down to HCL. This article outlines how an element, having its background changed a certain way with a script, can cause the issue. In case this can be fixed / addressed in a later release so we don't have to force SSL 100% of the time.

hxxp: simile. mit. edu/issues/browse/TIMELINE-52
hxxp: support. microsoft. com/kb/925014

and this link : hxxp: weblogs. asp. net/rchartier/archive/2008/03/12/ie7-this-page-contains-both-secure-and-nonsecure-items. aspx


« Last Edit: June 29, 2008, 02:11:19 AM by redundant »	Logged

Pages: [1] Go Up

« previous next »