OsCommerce & powwebs shared SSL

[jnsmerch]

I have a OsCommerce shopping cart and in the config.php file when I set my HTTP_SERVER to my domain address http:www.jnsspecialtymerchandise.com I lose the shopping cart contents when goig from ssl to nonssl. If I set HTTP_SERVER to powwebs temp url then I have no problems. Does anyone no how to get around this issue? I would like customers to go to www.jnsspecialtymerchandise.com and not jnsspecialtymerchandisecom.powweb.com.

Please help

[tbonekkt]

You'll probably need to wait until your domain has fully propagated.

[stevel]

Interesting. I haven't seen this happen and can't imagine how having the domain propagate would affect this. The shopping cart is identified by a unique identifier in the URL, and/or a cookie. Does it show you still logged in when you switch to the SSL connection?

[jnsmerch]

When someone logs in it shows them logged in but as soon as you go to a NONSSL portion of the site it thinks you are a guest, then when you go back to SSL it shows loged in again. Shopping cart is empty. I dont have any problems if I use my temp URL for POWWEB but I want to use my domain. I am forceing cookies but still it wont work. I am at my wit's end. I am using This months snapshot of oscommerce.

[stevel]

Dunno. I'm using the 20030518 snapshot, as that's what works with the major add-on I'm using (Shoppe Enhancement Controller). You can try posting a question in the forums at http://forums.oscommerce.com/ , but I suggest searching first to see if anyone has reported it before. And even then, don't get your hopes up - that has got to be one of the most unhelpful support forums I have ever encountered!

[schmartz]

I installed OSCommerce and seem to have everything running with one problem: When I go from shopping to checkout it asks me to log in (again) and the cart contents are lost. Shopping is http, checkout is https. Problem with cookies? I'm pretty sure I have the config file correct in the catalog -

define('HTTP_SERVER', 'http://beerbarons.org'); // eg, http: //localhost - should not be empty for productive servers
define('HTTPS_SERVER', 'https://beerbaron.secure.powweb.com'); // eg, https://localhost - should not be empty for productive servers
define('ENABLE_SSL', true); // secure webserver for checkout procedure?
define('HTTP_COOKIE_DOMAIN', 'beerbarons.org');
define('HTTPS_COOKIE_DOMAIN', 'beerbarons.org');
define('HTTP_COOKIE_PATH', '/store/catalog/');
define('HTTPS_COOKIE_PATH', '/store/catalog/');

Any ideas?

Store is at beerbarons.org/store/catalog/index.php
(wish I'd have thought about that url before installing!)

[natural]

Both of you have a problem with cookies.
1. You can't force cookies when on a shared SSL.
2. you can't set the same cookie domain for SSL and NON_SSL

Schmartz:

set your cookies to:

define('HTTP_COOKIE_DOMAIN', 'beerbarons.org');
define('HTTPS_COOKIE_DOMAIN', 'beerbaron.secure.powweb.com');
define('HTTP_COOKIE_PATH', '/store/catalog/');
define('HTTPS_COOKIE_PATH', '/store/catalog/');


jnsmerch:

Your domain is not pointing to the Powweb servers yet, but when it fully propagates, do the same.

define('HTTP_SERVER', 'http://beerbarons.org'); // eg, http: //localhost - should not be empty for productive servers
define('HTTPS_SERVER', 'https://beerbaron.secure.powweb.com'); // eg, https://localhost - should not be empty for productive servers
define('ENABLE_SSL', true); // secure webserver for checkout procedure?
define('HTTP_COOKIE_DOMAIN', 'jnsspecialtymerchandise.com');
define('HTTPS_COOKIE_DOMAIN', 'username.secure.powweb.com');
define('HTTP_COOKIE_PATH', '//');
define('HTTPS_COOKIE_PATH', '//');


That's if you are going to have the store located in your htdocs.

I also noticed that you have your own certificate, which you won'y be able to use with Powweb. Make sure that your https server is username.seure.powweb.com

[schmartz]

It worked! Thanks for the help Natural.

[natural]

no problem
:D