+ Reply to Thread
Results 1 to 4 of 4

Thread: SSL Log Out

  1. #1
    Client
    Join Date
    Mar 2006
    Location
    Ontario, Canada
    Posts
    282
    Squirrelcart version
    v3.4.0

    SSL Log Out

    Jamie... when a customer places an order our site goes through the following:

    http://www.woodwickcandles.ca (enters our site)

    http://www.woodwickcandles.ca/store/store.php (enters our storefront)

    https://www.woodwickcandles.ca/store/store.php (places order - secure site)

    https://www.woodwickcandles.ca/store/store.php?logout=1 (logs out)

    When the person logs out as above - the https remains in the URL... now when that person clicks on any other link on our webpage (not the store) all URL addresses will have the https in the URL...

    Is there something simple (housekeeping wise) that when the person logs out that the store returns to the non-secure URL?

    I'm not sure if this posses a problem or not - since so many various browers have different methods of reading security certificates.

    John

  2. #2
    Squirrelcart Staff Jamie's Avatar
    Join Date
    May 2002
    Posts
    6,719
    Squirrelcart version
    v3.3.7
    That does not happen with Squirrelcart generated links. If you follow the steps you provided, and then mouse over any link generated by Squirrelcart you'll see they all use a regular http:// URL, with the exception of links that are supposed to be secure.

    The custom links you've added at the top of the page are using relative links. If you want them to always use a non secure URL, you would need to change them to use absolute URLs.

    Your best bet if those links are on a page that is parsed by PHP is to use our SC_STORE_DIR_HTTP constant to precede those URLs. Printing the value of that constant will always print the regular non secure URL to the directory containing your storefront page (and your squirrelcart directory). So, if you have a file named "about-us.html" at the same level as your storefront page, you could link to it like this:
    PHP Code:
    <a href="<?php print SC_STORE_DIR_HTTP ?>/about-us.html">about us</a>
    Alternatively, you could just use your domain name. If you do however, and decide to change your domain name OR the directory you are using for Squirrelcart the code would need to be altered:
    PHP Code:
    <a href="http://www.example.com/about-us.html">about us</a

  3. #3
    Client
    Join Date
    Mar 2006
    Location
    Ontario, Canada
    Posts
    282
    Squirrelcart version
    v3.4.0

    All Fixed!

    Jamie,

    I decided to use absolute links with the web root - http://www.woodwickcandles.ca - in front of every link outside of squirrelcart - and it works!

    Now when a customer logs out of the https URL each link contains a non secure URL!

    Thanks again for your help...

    John

  4. #4
    Squirrelcart Staff Jamie's Avatar
    Join Date
    May 2002
    Posts
    6,719
    Squirrelcart version
    v3.3.7
    You're welcome, glad you fixed it.

+ Reply to Thread

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

     

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts