X-Cart:Configuring HTTPS - Revision history

Mouse at 13:41, 22 July 2020

2020-07-22T13:41:50Z

2020-07-22T10:03:04Z

2018-08-22T14:41:30Z

Enable the 'Use secure protocol (HTTPS)' option for X-Cart versions 4.7.9 and later. added

2018-01-12T08:18:58Z

‎Method 3. Use in addition to Methods 1 or 2 above or as a standalone method if Methods 1 or 2 cannot be used

2018-01-12T08:16:28Z

‎Method 3. Use in addition to Methods 1 or 2 above or as a standalone method if Methods 1 or 2 cannot be used

2017-11-15T19:01:48Z

‎Enable HTTPS for your store

2017-11-15T18:35:23Z

2017-11-15T15:38:54Z

2017-11-15T13:20:59Z

2017-11-15T13:09:29Z

@@ Line 7: / Line 7: @@
 The majority of hosting companies help their customers to purchase SSL certificates or provide their own Shared SSL URLs. If your hosting company does not render such services, you will need to purchase a certificate on your own.
-We will be glad to assist you with this issue. You can purchase SSL certificates from our company. We sell SSL certificates provided by the world's leading Certification Authority, [http://www.comodogroup.com Comodo Group]. For details, conditions and prices, please see https://www.x-cart.com/ssl/.
+We will be glad to assist you with this issue. You can purchase SSL certificates from our company. We sell SSL certificates provided by the world's leading Certification Authority, [https://www.comodogroup.com Comodo Group]. For details, conditions and prices, please see https://www.x-cart.com/ssl/.
 If you are on a dedicated server, we can offer you our service on analyzing and configuring your server and/or install an SSL Certificate on it. Please note that we will need the 'root' access to your server over SSH or the 'Administrator' access over MS Remote Access Desktop to complete these tasks.

@@ Line 7: / Line 7: @@
 The majority of hosting companies help their customers to purchase SSL certificates or provide their own Shared SSL URLs. If your hosting company does not render such services, you will need to purchase a certificate on your own.
-We will be glad to assist you with this issue. You can purchase SSL certificates from our company. We sell SSL certificates provided by the world's leading Certification Authority, [http://www.comodogroup.com Comodo Group]. For details, conditions and prices, please see http://www.x-cart.com/ssl/.
+We will be glad to assist you with this issue. You can purchase SSL certificates from our company. We sell SSL certificates provided by the world's leading Certification Authority, [http://www.comodogroup.com Comodo Group]. For details, conditions and prices, please see https://www.x-cart.com/ssl/.
 If you are on a dedicated server, we can offer you our service on analyzing and configuring your server and/or install an SSL Certificate on it. Please note that we will need the 'root' access to your server over SSH or the 'Administrator' access over MS Remote Access Desktop to complete these tasks.

@@ Line 38: / Line 38: @@
 https://www.sslshopper.com/apache-redirect-http-to-https.html
 </div>
 ====Method 2. Use for servers like nginx.conf====
@@ Line 55: / Line 58: @@
 https://www.bjornjohansen.no/redirect-to-https-with-nginx
 </div>
 <br /><br />
 ====Method 3. Use in addition to Methods 1 or 2 above or as a standalone method if Methods 1 or 2 cannot be used====
 <div class="mw-collapsible">

@@ Line 62: / Line 62: @@
 To switch your entire X-Cart store to HTTPS:
 # In your X-Cart store's Admin area, go to the '<u>General settings/Security options</u>' page and scroll down to the '''HTTPS options''' section.
-# From the 'Use secure protocol (HTTPS)' selector, select the option 'On all pages':<br />[[File:xc4_use_secure_protocol_479nlater.png|border|700px]]
+# Enable the 'Use secure protocol (HTTPS)' option:<br />[[File:xc4_use_secure_protocol_479nlater.png|border|700px]]
 # Save the changes.

@@ Line 77: / Line 77: @@
 </nowiki>
 </div>
 ===Enable HTTPS for the login, registration, checkout and payment pages (X-Cart versions prior to 4.7.9)===
 If you do not wish to enable HTTPS for the entire store site but need HTTPS for the login, registration, checkout and payment pages:

@@ Line 21: / Line 21: @@
 ====Method 1. Use for web servers with support for .htaccess, like apache====
+<div class="mw-collapsible">
 If you are using a web server of the above-named type, to set your entire X-Cart store to operate over HTTPS, you should add the following code to the .htaccess file after the line "RewriteBase":
   <nowiki>
@@ Line 37: / Line 37: @@
 You can also use the following instructions:
 https://www.sslshopper.com/apache-redirect-http-to-https.html
+</div>
 ====Method 2. Use for servers like nginx.conf====
+<div class="mw-collapsible">
 Convert the rules cited in Method 1 above
 to nginx.conf
@@ Line 54: / Line 54: @@
 For more info, see:
 https://www.bjornjohansen.no/redirect-to-https-with-nginx
 <br /><br />
 ====Method 3. Use in addition to Methods 1 or 2 above or as a standalone method if Methods 1 or 2 cannot be used====
+<div class="mw-collapsible">
 '''X-Cart versions 4.7.9 and later:'''<br />
 To switch your entire X-Cart store to HTTPS:
@@ Line 75: / Line 76: @@
 return true;
 </nowiki>
+</div>
 ===Enable HTTPS for the login, registration, checkout and payment pages (X-Cart versions prior to 4.7.9)===
 If you do not wish to enable HTTPS for the entire store site but need HTTPS for the login, registration, checkout and payment pages:

@@ Line 84: / Line 84: @@
 #* [[X-Cart:Security_Options#HTTPS_options | Use secure login form on a separate page (HTTPS)]] (Available in X-Cart versions 4.5.4 and earlier. Removed in X-Cart 4.5.5)
 # Save the changes.
 ===Enable HTTPS for specific php scripts===
@@ Line 107: / Line 108: @@
 If you are not sure whether your web server uses SSL certificates or runs behind an HTTPS Proxy, contact your hosting service provider or server administrator or email our technical support - we will help you find that out.
 If you experience problems with external services (payment / shipping) working over https while using curl/libcurl as the https module, try adding the following line to <u>top.inc.php</u>:

@@ Line 76: / Line 76: @@
 </nowiki>
-===Enable HTTPS for the login, registration, checkout and payment pages===
+===Enable HTTPS for the login, registration, checkout and payment pages (X-Cart versions prior to 4.7.9)===
 If you do not wish to enable HTTPS for the entire store site but need HTTPS for the login, registration, checkout and payment pages:
 # In your X-Cart store's Admin area, go to the '<u>General settings/Security options</u>' page and scroll down to the '''HTTPS options''' section.
@@ Line 97: / Line 97: @@
 ==HTTPS Proxy==
-Now, if your web server does not use SSL certificates, and you are running an HTTPS Proxy instead, you may need to make additional settings to enable your X-Cart work over SSL (secure connection). In the include/https_detect.php file, define the proxy IP address and set the $HTTPS variable to 'true':
+If your web server does not use SSL certificates, and you are running an HTTPS Proxy instead, you may need to configure some additional settings to enable your X-Cart work over SSL (secure connection). In the file include/https_detect.php, specify the proxy IP address and set the $HTTPS variable to 'true':
   <nowiki>