Kryptronic Software Support Forum

You are viewing this forum as a guest. Login to an existing account, or create a new account, to reply to topics and to create new topics.

#1 12-23-2013 22:26:54

stuseattle
Member
Registered: 05-25-2009
Posts: 90

Converting to "secured" site?

Back when we first set up CCP, going on our 5th year now, we didn't set it up on a secure server for a couple of reasons. Mainly, we were only going to process credit card orders offline and so, the way the cart operates, no credit card information, even the encrypted numbers, are actually ever stored on the server.  What isn't there can't be stolen, right?  (Make you wonder why Target had millions of number stored on their system when they were from in-store purchase.)

Anyway, every once in a while someone is afraid to order 'cause they don't see the little locked symbol. We offer a PayPal option and we also allow them to submit orders with a "Contact Buyer" selection, i.e., no payment at all and we call them to get the credit card number.

Is there a relatively simple way to "lock" the final check-out pages without big time server stuff?

Thanks all,

stu

Offline

 

#2 12-24-2013 09:57:45

webmaster
Administrator
From: York, PA
Registered: 04-20-2001
Posts: 19798
Website

Re: Converting to "secured" site?

It's trivial to install an SSL certificate on your hosting account.  If you do that, just re-run your CCP installer and input your SSL URLs and cookie settings when asked.  Afterwards, you can close out your installer, without completing any further steps.  It's best to get a cert that matches your domain name.  Ie, if you operate the site at wwwdomain.com, get a cert with the common name wwwdomain.com.


Nick Hendler

Offline

 

#3 08-18-2017 16:50:12

dukes
Member
From: London
Registered: 09-18-2003
Posts: 97
Website

Re: Converting to "secured" site?

Hi Nick
Can you post the full method steps to switch to full site SSL. I did as you mentioned in a previous older post see below

old instructions
=================================================================================================
Using your installer, update your Non-SSL URL so it uses an 'https'.  It will be important that your Non-SSL URL and SSL URL entries are exactly the same.  You may need to submit a support ticket with Kryptronic with your license key in it, asking us to reset your URL prior to making this change.

Then, login to admin and execute the following statement in Raw DB Admin:

UPDATE core_namespaces SET hreftype='SSL' WHERE hreftype='Non-SSL'

=================================================================================================
However this worked to a certain extent but the following screen grab indicates the page which contains links which did become secure links however did not show anything new when the link was clicked. Literally is was as if the click never happened.


http://www.concept-zen.com/screen-grab.jpg


The other thing that happened was the shopping cart was not behaving correctly. Items added to the basket were not able to be removed by clicking on the remove button. I did clear the cache and cookies and restart the browser both chrome and firefox.
What could the problem be?

What should the cookie path be for a https site versus a non-https site?

Also does it require that in order to secure the whole site using SSL you need to move everything in the htdocs folder to an equivalent httpsdocs folder?

Please advise asap as I need to get this done quickly as possible.


regards
dukes

Offline

 

#4 08-22-2017 08:23:14

webmaster
Administrator
From: York, PA
Registered: 04-20-2001
Posts: 19798
Website

Re: Converting to "secured" site?

This recent post appears to have the info you're looking for:

https://forum.kryptronic.com/viewtopic.php?id=33185


Nick Hendler

Offline

 

#5 08-22-2017 10:25:23

dukes
Member
From: London
Registered: 09-18-2003
Posts: 97
Website

Re: Converting to "secured" site?

Hi Nick
Can you answer the other questions I posed above please regarding the cookie domains and why I'm having issues with shopping basket when I completed the https change. I've since reverted the changes but I have illustrated the issues I was having above. Some links would not work anymore.


regards
dukes

Offline

 

#6 08-23-2017 10:14:46

webmaster
Administrator
From: York, PA
Registered: 04-20-2001
Posts: 19798
Website

Re: Converting to "secured" site?

Please list out all the steps you performed.  Can you confirm whether or not your install is stock or modified?  If it's modified in some fashion, what was done?  Do you have a .htaccess file running, if so are there SEO rules in it?  What do they do?  Etc...


Nick Hendler

Offline

 

#7 08-24-2017 09:43:08

dukes
Member
From: London
Registered: 09-18-2003
Posts: 97
Website

Re: Converting to "secured" site?

Hi Nick
The install is stock. Yes I have a htaccess file running rules below :-
======================================================
Options +FollowSymLinks
RewriteEngine on

# Version 8 Rewrite Rules
RewriteBase /
RewriteCond %{HTTP_HOST} !^www.concept-zen.com$
RewriteRule ^(.*)$ http://www.concept-zen.com/$1 [R=301,L]


#rules to remap underscores to dashes from previous changes. Probably can remove this now.
RewriteCond %{REQUEST_FILENAME} !\.(png|jpg|gif)$
rewriteRule ^([^_]*)_([^_]*)_([^_]*)_([^_]*)_([^_]*)_([^_]*)_([^_]*)_([^_]*)_(.*)$ http://www.concept-zen.com/$1-$2-$3-$4-$5-$6-$7-$8-$9 [R=301,L]
RewriteCond %{REQUEST_FILENAME} !\.(png|jpg|gif)$
rewriteRule ^([^_]*)_([^_]*)_([^_]*)_([^_]*)_([^_]*)_([^_]*)_([^_]*)_(.*)$ http://www.concept-zen.com/$1-$2-$3-$4-$5-$6-$7-$8 [R=301,L]
RewriteCond %{REQUEST_FILENAME} !\.(png|jpg|gif)$
rewriteRule ^([^_]*)_([^_]*)_([^_]*)_([^_]*)_([^_]*)_([^_]*)_(.*)$ http://www.concept-zen.com/$1-$2-$3-$4-$5-$6-$7 [R=301,L]
RewriteCond %{REQUEST_FILENAME} !\.(png|jpg|gif)$
rewriteRule ^([^_]*)_([^_]*)_([^_]*)_([^_]*)_([^_]*)_(.*)$ http://www.concept-zen.com/$1-$2-$3-$4-$5-$6 [R=301,L]
RewriteCond %{REQUEST_FILENAME} !\.(png|jpg|gif)$
rewriteRule ^([^_]*)_([^_]*)_([^_]*)_([^_]*)_(.*)$ http://www.concept-zen.com/$1-$2-$3-$4-$5 [R=301,L]
RewriteCond %{REQUEST_FILENAME} !\.(png|jpg|gif)$
rewriteRule ^([^_]*)_([^_]*)_([^_]*)_(.*)$ http://www.concept-zen.com/$1-$2-$3-$4 [R=301,L]
RewriteCond %{REQUEST_FILENAME} !\.(png|jpg|gif)$
rewriteRule ^([^_]*)_([^_]*)_(.*)$ http://www.concept-zen.com/$1-$2-$3 [R=301,L]
RewriteCond %{REQUEST_FILENAME} !\.(png|jpg|gif)$
rewriteRule ^([^_]*)_(.*)$ http://www.concept-zen.com/$1-$2 [R=301,L]



RewriteRule ^prod--(.*)\.html /Item/$1 [R=301,L]
RewriteRule ^cat--(.*)\.html /Category/$1 [R=301,L]



RewriteRule ^index.php - [L,PT]
RewriteRule ^$ index.php?COREseourl=/ [L,PT]
RewriteRule ^/$ index.php?COREseourl=/ [L,PT]
RewriteRule ^sitemap\.xml utilities/sitemap.xml [L,PT]
RewriteRule ^rss\.xml utilities/rss.xml [L,PT]
RewriteCond %{REQUEST_URI} ^/
RewriteCond %{REQUEST_URI} !\.(xml|css|js|gif|jpg|jpeg|png|pdf)$ [NC]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*) index.php?COREseourl=/$1 [L,PT]
AddType x-httpd-php56 .php

=======================================================================
The steps I performed were as Illustrated above
1. installed the certificate
2. ran the installer again and modified the http references to https in both the secure and non secure fields. Then ran it to completion without modifying any other files.
3. logged into the raw db admin and ran a sql command

UPDATE core_namespaces SET hreftype='SSL' WHERE hreftype='Non-SSL'

That was it.

PS I am not running a plesk server. Just a regular shared cloud hosted account.

Last edited by dukes (08-24-2017 09:46:07)


regards
dukes

Offline

 

#8 08-25-2017 08:36:04

webmaster
Administrator
From: York, PA
Registered: 04-20-2001
Posts: 19798
Website

Re: Converting to "secured" site?

Right now nothing is running SSL.  The block with the comment 'rules to remap underscores to dashes from previous changes. Probably can remove this now.' can be removed, may be causing issues.


Nick Hendler

Offline

 

#9 08-27-2017 11:31:44

dukes
Member
From: London
Registered: 09-18-2003
Posts: 97
Website

Re: Converting to "secured" site?

yes I'll make the changes and update you once they are complete again. I reversed the changes in order for the shopping cart to work again correctly.


regards
dukes

Offline

 

Board footer