Site goes SSL from Login Page

[Paul Bulpit]

I posted on the V7 forum about this issue on Friday (no response yet) - I see the same problem in v9.

Once you have visited the Login page, when you leave the page the whole site goes https - ?



Paul
http://www.amberwood.co.uk

[cdicken]

I need to know more information to be able to help with this.

How is SSL set up in your site? Do you just have essential pages under SSL?

When you say 'leave the page' are you talking about logging in here, or are you talking about clicking the 'click here to start shopping' link?

[Paul Bulpit]

Thanks, Chris - SSL set to "Checkout Pages and Customer Login only". Yes I suppose you can say the 'click here to start shopping' link as that does it, (the Login page is heavily modified) but it is the same for all hard-coded links on the page.

I first noticed this on my V7 site (link in my profile) when trying to cure the 'Secure and Nonsecure Items' message (in IE6 - don't have IE7 - FF is the same, but no message) - the problem reared its ugly head after going SSL in December AND hard-coding my section links a few weeks ago.

If you visit the Login page but don't login, the Section Links go 'https' and all hard links stay like that throughout the site until you eventually click on a javascript link, then it reverts to normal. It has been my understanding that going SSL site-wide slows things down - and of course the nonsecure message pops up every time you change pages, which is annoying. Casual browsers will not notice the difference in the link format - eventually for what will seem like no apparent reason, the nonsecure message will cease to appear, because they have used a different type of link.

I first asked this question on the V7 forum (here) but had no reply. Then the V9 beta was released, and I uploaded a very basic site, with absolutely NO modifications, to a different url on the same server.

I see the same issue here in V9 and therefore deduce that it is not caused by me, my hard-coded links, or any other modifications that I have made in V7.

The V7 site is extensively tweaked with the help of the forum and over two years' worth of playing about with it. The V9 site is 'out-of-the-box' (and currently devoid of products).

If you DO login, the problem does not seem to occur (i.e. use it as intended).

The email address required to test this is sales at actinic and the 'password' is your office postcode with no spaces - same on both sites. No payment is required if placing a test order.


Paul
http://www.amberwood.co.uk/

[cdicken]

Hi Paul

I think you're right that there is a problem in v9. This problem was in v8 as well, but we fixed it there. It looks like the fix has not been ported across to v9 yet.

For a short term fix, replace the link in the login page (which I think is just a NETQUOTEVAR in v7) with a hard-coded link that points to the store home page with an http link.

I'll get this scheduled to be fixed in v9.

[Paul Bulpit]

Sorry, I don't think that's the answer, short-term or otherwise - the CGI link "If you don't have an account, please click here to start shopping.." isn't a problem, it works fine.

The problem on that V9 page is the Section Links on the left, and 'Home', 'Sitemap' & 'Search' along the top - all the html links, and unmodified by me.

(See here)

In my V7 site it's all the Section Links, and other links in the centre of the page, all hard-coded by me, changed the original CGI links. But as it happens in V9 as well, it isn't the fact that I modified them that causes it.

I know that George has hard-coded his section links, but he doesn't use Login. Anybody else in this position?

Paul

[cdicken]

I have no idea about this one I'm afraid. I'll need to run it past the development team. I'll be in touch.

[cdicken]

Paul

I've been playing with the conditions on the section links, and I think if you use the following code in the 'Section Name Only Section Link' layout, it will always use the correct link format on the Login Page...

<actinic:block if="%3cactinic%3avariable%20name%3d%22IsSectionIncludedInSiteMap%22%20%2f%3e" >
<a href="<actinic:block if="%3cactinic%3avariable%20name%3d%22IsLoginPageSuppressed%22%20%2f%3e%20AND%0d%3cactinic%3avariable%20name%3d%22UnregCustomersAreNotAllowed%22%20%2f%3e%20AND%0d%3cactinic%3avariable%20name%3d%22PageType%22%20%2f%3e%20%21%3d%20%22Login%22" ><actinic:variable name="SectionPageName" /></actinic:block><actinic:block if="%28%3cactinic%3avariable%20name%3d%22IsLoginPageSuppressed%22%20%2f%3e%20%3d%3d%20false%29%20OR%0d%28%3cactinic%3avariable%20name%3d%22UnregCustomersAreNotAllowed%22%20%2f%3e%20%3d%3d%20false%29%20OR%20%28%3cactinic%3avariable%20name%3d%22PageType%22%20%2f%3e%20%3d%3d%20%22Login%22%29" ><actinic:variable name="SectionURL" /></actinic:block>" class="product_section">
   <Actinic:Variable Name="SectionName"/>
</a>	
</actinic:block>