WordPress.org

1. mrfolkblues
   Member
   Posted 2 years ago #
   

   I've been trying to get the WP-Ecommerce plugin properly secured (http://www.instinct.co.nz/e-commerce/), and it's driving me nuts. I tried following their advice, tried other plugins, hacks, etc. I can't seem to get things to work. I always have those unsecured items on the page.

   I tried using your plugin to force SSL on the shopping cart/checkout page, but what usually happens is it gets stuck in a redirect loop. It's trying to redirect to the non-www domain, then back to the www domain. I also have been unable to set the entire site to https:// by changing the main WordPress URL. This breaks the site and I have to go change these back in the database manually.

   I'd appreciate any help you might be able to offer on configuring things.

2. Mvied
   Member
   Plugin Author
   Posted 2 years ago #
   

   As I've posted in a few other support topics about these redirect loops, I can't seem to reproduce them on my test sites. I'm going to push out a new version (1.7.1) that may fix the issue. When it's released, I'd like you to update, try it again, and let me know if the problem persists. I can't reproduce this problem, so I'll need your help in tracking down what the problem is if this update doesn't fix it.

3. mrfolkblues
   Member
   Posted 2 years ago #
   

   Mvied,

   I seem to have resolved my issues. I had a plugin installed called "Enforce www. Preference" by Mark Jaquith. Once I disabled that plugin, the redirect loop stopped happening. Seems like there may have been a conflict.

   Also, I was still having problems with some elements not being secure on the page. I tracked this down to the cforms plugin, which inserts some code into the header of the page (links to its scripts and so on). In cforms settings, I excluded this behavior to the specific pages that require cforms. Now I have a properly encrypted page.

   Thanks for writing this plugin. It seems that my problems were not related to WP-Ecommerce after all.

4. Mvied
   Member
   Plugin Author
   Posted 2 years ago #
   

   Well that's good to hear!

   I still find it strange that my plugin couldn't fix the scripts from cforms. Were there scripts hosted externally or something?

5. mrfolkblues
   Member
   Posted 2 years ago #
   

   No, but the scripts did have the non-www version of the domain name in their links, whereas the rest of the site is supposed to be the www version, and the SSL certificate applies only to www. The source from the page is below:

   <!-- Start Of Script Generated By cforms v11.4 [Oliver Seidel | www.deliciousdays.com] -->
   <link rel="stylesheet" type="text/css" href="http://domain.com/wp-content/plugins/cforms/styling/gopalcloud.css" />
   <script type="text/javascript" src="http://domain.com/wp-content/plugins/cforms/js/cforms.js"></script>
   <script type="text/javascript" src="http://domain.com/wp-content/plugins/cforms/js/calendar.js"></script>
   <script type="text/javascript">
   	var cforms = jQuery.noConflict();
   	Date.dayNames = ["S","M","T","W","T","F","S"];
   	Date.abbrDayNames = ["S","M","T","W","T","F","S"];
   	Date.monthNames = ["January","February","March","April","May","June","July","August","September","October","November","December"];
   	Date.abbrMonthNames = ["January","February","March","April","May","June","July","August","September","October","November","December"];
   	Date.firstDayOfWeek = 0;
   
   	Date.fullYearStart = "20";
   	cforms.dpText = { TEXT_PREV_YEAR:"Previous Year",TEXT_PREV_MONTH:"Previous Month",TEXT_NEXT_YEAR:"Next Year",TEXT_NEXT_MONTH:"Next Month",TEXT_CLOSE:"Close",TEXT_CHOOSE_DATE:"Choose Date",ROOT:"http://domain.com/wp-content/plugins/cforms"};
   	cforms(function() { Date.format = "dd/mm/yyyy"; cforms(".cf_date").datePicker( {startDate:"01/01/1899",verticalOffset:10,horizontalOffset:5,horizontalPosition:1 } ); Date.format = "mm/dd/yyyy"; });
   </script>
   <!-- End Of Script Generated By cforms -->

   I'm not sure if the newest version of cforms will have the same problem.

6. Mvied
   Member
   Plugin Author
   Posted 2 years ago #
   

   Ah, yeah, my plugin wouldn't pick that up as it uses the URL configured in the admin panel. You should probably say something to the plugin author, he must be doing something strange.

Topic Closed

This topic has been closed to new replies.