insideorkut.com

How Can I be removed from Capital One's iContact mailing list of Applications?

Try iContact email marketing for free for 30 days. Click here to use coupon...

Get a free trial of iContact here. Click here for this special deal...
My 1st question is: How Can I be removed from Capital One's iContact mailing list of Applications? Many thanks for any response. Another question on my mind: Hi All,.

I'm not too sure if this has been discussed before somewhere in this massive forum, but I need some help with osCommerce Procedures using SSL..

Before I start, the following is the specs:.

Windows 2003 Server Enterprise Edition w/SP1.

Internet Information Services (IIS) 6.

AustDomains Premium SSL Certificate.

OsCommerce 2.2 Milestone 2 Update 051113.

Shop:.

Http://marketplace.rcsystems.com.au.

SSL Certificate has been installed successfully..

Configure.php as follows:.

// Define the webserver and path parameters.

// * DIR_FS_* = Filesystem directories (local/physical).

// * DIR_WS_* = Webserver directories (virtual/URL).

Define('HTTP_SERVER', 'http://marketplace.rcsystems.com.au'); // eg, http://localhost - should not be empty for productive servers.

Define('HTTPS_SERVER', 'https://marketplace.rcsystems.com.au'); // eg, https://localhost - should not be empty for productive servers.

Define('ENABLE_SSL', 'true'); // secure webserver for checkout procedure?.

Define('HTTP_COOKIE_DOMAIN', 'marketplace.rcsystems.com.au');.

Define('HTTPS_COOKIE_DOMAIN', 'marketplace.rcsystems.com.au');.

Define('HTTP_COOKIE_PATH', '/');.

Define('HTTPS_COOKIE_PATH', '/');.

Define('DIR_WS_HTTP_CATALOG', '/');.

Define('DIR_WS_HTTPS_CATALOG', '/');.

Define('DIR_WS_IMAGES', 'images/');.

Define('DIR_WS_ICONS', DIR_WS_IMAGES'icons/');.

Define('DIR_WS_INCLUDES', 'includes/');.

Define('DIR_WS_BOXES', DIR_WS_INCLUDES'boxes/');.

Define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES'functions/');.

Define('DIR_WS_CLASSES', DIR_WS_INCLUDES'classes/');.

Define('DIR_WS_MODULES', DIR_WS_INCLUDES'modules/');.

Define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES'languages/');.

Define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');.

Define('DIR_FS_CATALOG', dirname($HTTP_SERVER_VARS['SCRIPT_FILENAME'])'/');.

Define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG'download/');.

Define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG'pub/');.

The following is whats happening.

Browse the iContact website fine, no worries. Checkout Procedure, Login Procedure redirects to the HTTPS URL fine..

Problem though is it does not establish the SSL Session aka Does not activate SSL.

I've had a chat with the SSL Cert Providers who have been working on this with me for about a week..

This is the iContact email response i've got from them:.

******************.

Hi Ray,.

I had another quick look at your page. It seems to be your HTML..

Eg. this image pops up with the padlock no problem.

Https://marketplace....az_top_left.gif.

I think this line may be the culprit.

<base href="http://marketplace.rcsystems.com.au/">.

This is basically telling browsers to treat the page as insecure. You will want to make it read https when it is secure..

Kind Regards,.

Ben Brooks.

Aust Domains Support.

T: 08 9349 4665 (Australia Only).

T: +61 8 9349 4665 (International).

F: +61 08 6210 1656.

E: .au..

Comments (6)

I would like to know the answer too. Anyone here know what is the answer to your question. I'll do some investigation and get back to you if I find an anything. You should email the people at iContact as they probably could assist you..

Comment #1

Hi Ray,.

Thanks for your reply..

This is a lot deeper than relative/absolute paths for images....

I always use the relative path, especially when it comes to SSL sites..

Its actually a lot more deeper in the code, whereby the $request_type variable was being set to NONSSL for both HTTP and HTTPS websites even though they were specified seperately in configure.php. With this being the case, the <base href> tag it the HTML HEAD of each page was being set to HTTP://<website> causing the browser to think SSL is turned off even though the address bar has HTTPS in it..

With the help of a friend who was a PHP Developer for 5 years, i've made the following change which has fixed the problem perfectly..

/includes/application_top.php - Line 42.

Change this line:.

$request_type = (getenv('HTTPS') == 'on') ? 'SSL' : 'NONSSL';.

To this line:.

$request_type = ($_SERVER["SERVER_PORT"] == 443) ? 'SSL' : 'NONSSL';.

This seems to have done the trick in fixing both the SSL Padlock issue and the <base href> HTML Tag Issue..

I have logged this as a bug report for future reference:.

Http://www.oscommerc...nity/bugs,3407/.

Many thanks for your reply, and I hope this helps anyone else that's having the same issue.

Thanks and Regards,.

Ray Frangie.

*links and iContact email to non osCommerce, against forum rules*.

This post has been edited by.

The_Bear.

: 03 January 2006, 23:24..

Comment #2

Actually, you would have found that fix if you had done a search of these forums for ssl issues. Your bug report is not valid, as it is not a bug within osCommerce - it is down to the way in which your hosting provider has their system set up to handle ssl. osCommerce cannot cover all possibilities for ssl and whilst port 443 is very often the ssl port it is not always the ssl port..

Vger..

Comment #3

It's my own dedicated box running Windows 2003 Server Enterprise Edition and IIS6.

It was seen as a fault with all browsers even ones running on Linux..

Changing that line of code seems to have fixed the problem for all browsers...

Comment #4

Of course. It's not a browser issue..

See:.

Http://forums.oscommerce.com/index.php?sho...23&#entry672623..

Comment #5

I was really looking for it. I am contented with your post...

Comment #6

I seem to recall hearing that IIS returns.

Getenv('HTTPS').

As.

1.

And not.

On.

OsC should really check.

Both.

Forms! So yes, it could be called a bug (of sorts) in osC. Maybe something like:.

$env_HTTPS = getenv('HTTPS');.

$request_type = ($env_HTTPS == 'on' || $env_HTTPS == '1') ? 'SSL' : 'NONSSL';.

I've seen conflicting information on how IIS handles the HTTPS environment variable, so maybe someone more knowledgeable in the ways of IIS can speak on this? I don't know if there are any cases where $env_HTTPS will be unset or otherwise cause errors (is isset() needed?)...

Comment #7


This question was taken from a support group/message board and re-posted here so others can learn from it.