Welcome Visitor, Please Login or Register Now Friday, April 19, 2024 02:38 PM 
Forums Index > Mewsoft Products > Auctionawy > Use secure server feature
New Topic   New Reply
Search for:
Author Message
totalbids totalbids's personal page
Registered Member
Posts: 64 Display member's posts
Joined: 04-19-24 02:38 PM
Location: Southend
Member Offline
View Member's Profile Visit member's website http://www.totalbids.co.uk Send private message YIM Messenger: toptech1911 MSN Messenger: jason_yorke@hotmail.com
 
Back to top
Use secure server feature Edit Delete Reply with quote Quote
First Post Posted on: 02-17-08 10:01 AM next post first post
OK..I am struggling with this one. Please someone throw some light on it.

When "use secure server" is set to yes, a user registers in secure "mode". He then click submit and is taken to to the confimation page. He then gets his verification email to say he has registered and then clicks on the link to confirm his email address. OK...here's the bit that dont work. He then clicks on my account and goes to the secure MYACCOUNTSSL page. He logs in and then get transferred to the overview page still in secure. If he clicks on sell he is asked to login again as he is not logged into non secure site. This login still goes back to the secure site where he is already logged in. There is no way to log into the non-secure site whilst "use secure server" is set to yes.

I understand that non-secure and secure are effectively 2 different sites with regards to cookies so if the cookie is not on the users machine initially for both secure and non secure then they will not show as logged in in both "sites"

Can anyone help here??

I have had to temporarily disable use secure server as noone is able to log into their account.
mewsoft mewsoft's personal page
Administrator Team Member
Posts: 5381 Display member's posts
Joined: 04-19-24 02:38 PM
Location: knxoville, TN, USA
Member Offline
View Member's Profile Visit member's website Mewsoft Corporation Send private message ICQ Messenger: ICQ AIM Messenger: AIM YIM Messenger: Yahoo MSN Messenger: MSN
 
Back to top
Re: Use secure server feature Edit Delete Reply with quote Quote
Reply #: 1 Posted on: 02-17-08 10:07 AM next post previous post
The SSL server must not be shared and the same cgi-bin must be accessable from both "http" and "https" so you have to get your cetrificate and put your secure server on your site

Mewsoft Support
www.mewsoft.com
totalbids totalbids's personal page
Registered Member
Posts: 64 Display member's posts
Joined: 04-19-24 02:38 PM
Location: Southend
Member Offline
View Member's Profile Visit member's website http://www.totalbids.co.uk Send private message YIM Messenger: toptech1911 MSN Messenger: jason_yorke@hotmail.com
 
Back to top
Re: Use secure server feature Edit Delete Reply with quote Quote
Reply #: 2 Posted on: 02-17-08 10:11 AM next post previous post
I do have my own certificate and the files are accesable from the cgi-bin directory.

Any other ideas??
totalbids totalbids's personal page
Registered Member
Posts: 64 Display member's posts
Joined: 04-19-24 02:38 PM
Location: Southend
Member Offline
View Member's Profile Visit member's website http://www.totalbids.co.uk Send private message YIM Messenger: toptech1911 MSN Messenger: jason_yorke@hotmail.com
 
Back to top
Re: Use secure server feature Edit Delete Reply with quote Quote
Reply #: 3 Posted on: 02-17-08 02:56 PM next post previous post
Ok...still noway of doing this secure issue. Its a feature that is important to the script because of sensitive information that the user inputs, IE credit card numbers and bank account details.

Could the script be changed so that if the user is not logged into non secure site then if he clicks sell the sign in form remains non secure but any links on the side of the form take the user back to secure. This is really a major issue for me as i purchased this script to replace my existing perl non mysql script and thought that this secure server was all up and running. Apparantly not!
Marty Marty's personal page
Registered Member
Posts: Display member's posts
Joined: 04-19-24 02:38 PM
Member Offline
View Member's Profile PM
 
Back to top
Re: Use secure server feature Edit Delete Reply with quote Quote
Reply #: 4 Posted on: 02-17-08 08:46 PM next post previous post
Have you tryed placing S after all http url's in configurations, re: not just secure settings.

Making Sell a secure page, would'nt that work maybe ?
totalbids totalbids's personal page
Registered Member
Posts: 64 Display member's posts
Joined: 04-19-24 02:38 PM
Location: Southend
Member Offline
View Member's Profile Visit member's website http://www.totalbids.co.uk Send private message YIM Messenger: toptech1911 MSN Messenger: jason_yorke@hotmail.com
 
Back to top
Re: Use secure server feature Edit Delete Reply with quote Quote
Reply #: 5 Posted on: 02-17-08 09:02 PM next post previous post
Problem there is that the submit auction then takes you back to non secure and it says you are not logged in and need to login before you can sell.

Good idea though. I did change the details on MyAccount.cgi so that credit card, bank manager, money manager and payment history went secure, but it still asks you to log in before you access these and when you do login you are taken back to unsecure so you try to do it again and it asks you to login again, and basically continually loops.

I need an answer to this as i am ready to recommend this software to over 1100 already auction webmasters who are unhappy with their existing software hence the reason why myself and OK2BID have been working on programs to import all the old data into the new one. But this secure issue will definately not be very well received as a lot of the other sites do have secure certificate.

Please could someone come up with an answer.
totalbids totalbids's personal page
Registered Member
Posts: 64 Display member's posts
Joined: 04-19-24 02:38 PM
Location: Southend
Member Offline
View Member's Profile Visit member's website http://www.totalbids.co.uk Send private message YIM Messenger: toptech1911 MSN Messenger: jason_yorke@hotmail.com
 
Back to top
Re: Use secure server feature Edit Delete Reply with quote Quote
Reply #: 6 Posted on: 02-18-08 02:06 PM next post previous post
So noone can throw any light on this one then? Major stumbling block i would say!
ctoshack ctoshack's personal page
Registered Member
Posts: 3 Display member's posts
Joined: 03-04-06 07:56 PM
Member Offline
View Member's Profile Send private message
 
Back to top
Re: Use secure server feature Edit Delete Reply with quote Quote
Reply #: 7 Posted on: 02-18-08 08:59 PM next post previous post
You may have your certificate and all but is you ip address private. Meaning when a webhost adds webspace for various user ie xxx.com abc.com they assign you space on one server with a shared ip address and so on. You many need to get your webhosting provider to assign you a private ip address soley for your services. They may also have to install your certificate for you depending on the host. I had the same problem and my provider assures me that if I upgrade to a private ip at $2 a month extra and and install a secure certificate. I will not longer have that issue.

Also I'm not sure what kind of certificate you have or if you generated it yourself but you may want to try one from a company such as verisign. Often these companines have free trial certificates and in some cases certain certificates cause problems with web browsers. Most of the popular companies generate certificates that are transparent to web browsers and do not pop up thos god awfull nag things that make your users unsure of entering information.
mewsoft mewsoft's personal page
Administrator Team Member
Posts: 5381 Display member's posts
Joined: 04-19-24 02:38 PM
Location: knxoville, TN, USA
Member Offline
View Member's Profile Visit member's website Mewsoft Corporation Send private message ICQ Messenger: ICQ AIM Messenger: AIM YIM Messenger: Yahoo MSN Messenger: MSN
 
Back to top
Re: Use secure server feature Edit Delete Reply with quote Quote
Reply #: 8 Posted on: 02-18-08 11:47 PM next post previous post
Hello friends,

I answered this before but the answer again explained,

You have to have both your "http" server space and "https" server spaced hosted (actually directories) on the same server space.

so your website root directories would be like:

/www/domain/
/cgi-bin
/https/

and you can access this same cgi-bin from both protocols "http and https:

http://domain.com/cgi-bin
https://domain.com/cgi-bin

you can not use :
http://domain.com/cgi-bin for the http
and http://anotherdomain.com/cgi-bin for https

of course 99% of hosting companies provide the SSL private solution, only old ones still in the shared SSL space and this stuff. New hosting companies use good control panels like Plesk and new CPanel.

Thanks

Mewsoft Support
www.mewsoft.com
totalbids totalbids's personal page
Registered Member
Posts: 64 Display member's posts
Joined: 04-19-24 02:38 PM
Location: Southend
Member Offline
View Member's Profile Visit member's website http://www.totalbids.co.uk Send private message YIM Messenger: toptech1911 MSN Messenger: jason_yorke@hotmail.com
 
Back to top
Re: Use secure server feature Edit Delete Reply with quote Quote
Reply #: 9 Posted on: 02-19-08 12:33 AM next post previous post

Hello friends,

I answered this before but the answer again explained,

You have to have both your "http" server space and "https" server spaced hosted (actually directories) on the same server space.

so your website root directories would be like:

/www/domain/
/cgi-bin
/https/

and you can access this same cgi-bin from both protocols "http and https:

http://domain.com/cgi-bin
https://domain.com/cgi-bin

you can not use :
http://domain.com/cgi-bin for the http
and http://anotherdomain.com/cgi-bin for https

of course 99% of hosting companies provide the SSL private solution, only old ones still in the shared SSL space and this stuff. New hosting companies use good control panels like Plesk and new CPanel.

Thanks



So in effect what you are saying is although i own my own certificate i need the certificate changed from https://secure.totalbids.co.uk to https://www.totalbids.co.uk ??
mewsoft mewsoft's personal page
Administrator Team Member
Posts: 5381 Display member's posts
Joined: 04-19-24 02:38 PM
Location: knxoville, TN, USA
Member Offline
View Member's Profile Visit member's website Mewsoft Corporation Send private message ICQ Messenger: ICQ AIM Messenger: AIM YIM Messenger: Yahoo MSN Messenger: MSN
 
Back to top
Re: Use secure server feature Edit Delete Reply with quote Quote
Reply #: 10 Posted on: 02-19-08 02:35 PM next post previous post
Yes

Mewsoft Support
www.mewsoft.com
totalbids totalbids's personal page
Registered Member
Posts: 64 Display member's posts
Joined: 04-19-24 02:38 PM
Location: Southend
Member Offline
View Member's Profile Visit member's website http://www.totalbids.co.uk Send private message YIM Messenger: toptech1911 MSN Messenger: jason_yorke@hotmail.com
 
Back to top
Secure sorted Edit Delete Reply with quote Quote
Reply #: 11 Posted on: 02-19-08 02:45 PM last post previous post
Many thanks Ahmed. That issue is now well and truly sorted and contrary to my previous posts, i have to say this is a superb feature!! Another reason to cross over from other scripts.
Page 1 of 1
Go to page:

New Topic   New Reply Mark Unread
Jump to:  
Delete   Move     Lock   +Favorits   +Notify   Print  

  Mewsoft and Mewsoft Logos are registered trademarks. ® Corporation. All Rights Reserved.  Copyright -  Privacy -  Terms of Use  Page Load: 0.3949 Seconds 
Powered by Boardawy © 2000-2011. Mewsoft Corporation