Loaded Commerce Community

Banner


Board index » CRE Loaded Support » CRE Loaded 6.2

All times are UTC - 5 hours




Post new topic Reply to topic  [ 7 posts ] 
Author Message
 Post subject: shopping_cart.tpl not secure!
PostPosted: Tue Aug 09, 2011 11:42 am 
Offline
CRE Freak

Joined: Tue Jul 07, 2009 10:28 am
Posts: 69
Does anyone know why this page is not secure, and how I can make it a secure page? The checkout page is secure, but not the cart. Thanks!


Top
 Profile  
 
 Post subject: Re: shopping_cart.tpl not secure!
PostPosted: Tue Aug 09, 2011 3:11 pm 
Offline
CRE Legend
User avatar

Joined: Thu Jun 12, 2008 6:39 am
Posts: 2405
Location: New Zealand
Doesn't really need to be - there's no 'sensitive info' being submitted to that page. You want https:// on pages where customers are completing personal details (eg addresses) and obviously payment info.

A few people make their entire cart https:// on every page - bit pointless, affects seo, drain on server etc.

Simon

_________________
www.codemehappy.com
For Cre Loaded tips, how-to articles and more


Top
 Profile  
 
 Post subject: Re: shopping_cart.tpl not secure!
PostPosted: Tue Aug 09, 2011 3:35 pm 
Offline
CRE Freak

Joined: Tue Jul 07, 2009 10:28 am
Posts: 69
Actually, their name, address, etc. appears on that page. The same with the account page. Thanks for responding!


Top
 Profile  
 
 Post subject: Re: shopping_cart.tpl not secure!
PostPosted: Tue Aug 09, 2011 3:46 pm 
Offline
CRE Legend
User avatar

Joined: Thu Jun 12, 2008 6:39 am
Posts: 2405
Location: New Zealand
lycialive wrote:
Actually, their name, address, etc. appears on that page. The same with the account page. Thanks for responding!

They're not entering those details on that page - https:// is for forms. besides, you're probably looking at the shipping estimator at the bottom of the shopping cart right? They're not even logged in.

Simon

_________________
www.codemehappy.com
For Cre Loaded tips, how-to articles and more


Top
 Profile  
 
 Post subject: Re: shopping_cart.tpl not secure!
PostPosted: Tue Aug 09, 2011 3:58 pm 
Offline
CRE Freak

Joined: Tue Jul 07, 2009 10:28 am
Posts: 69
In between the shopping cart info (which you're right, it's nothing except no. of items), and the shipping estimator is this: (using my account info since I'm logged into my acct.)

Shipping Options:

Item weight:

ship to: my name
my address
my city, state, zip
country


and that's it. I'm logged into my own account. So, I guess I'm not sure what displays. I was just told by PCI compliance that the shopping cart needs to be https. I hadn't noticed that it wasn't until now.


Top
 Profile  
 
 Post subject: Re: shopping_cart.tpl not secure!
PostPosted: Tue Aug 09, 2011 7:49 pm 
Offline
CRE Legend
User avatar

Joined: Thu Jun 12, 2008 6:39 am
Posts: 2405
Location: New Zealand
That is the shipping estimator. Info in the shipping estimator doesn't get sent in the shopping cart page ... proof:
Code:
</table></form>
  </td>
      </tr>
  <?php
  //RCI start
  echo $cre_RCI->get('shoppingcart', 'logic');
  //RCI end
   
  // WebMakers.com Added: Shipping Estimator
  if ((SHIPPING_SKIP == 'No' || SHIPPING_SKIP == 'If Weight = 0') && $cart->weight > 0) {
    if (SHOW_SHIPPING_ESTIMATOR == 'true') {
      // always show shipping table
      ?>
      <tr>
        <td valign="top"><?php     
         if ( file_exists(TEMPLATE_FS_CUSTOM_MODULES . FILENAME_SHIPPING_ESTIMATOR)) {
            require(TEMPLATE_FS_CUSTOM_MODULES . FILENAME_SHIPPING_ESTIMATOR);
        } else {
            require(DIR_WS_MODULES . FILENAME_SHIPPING_ESTIMATOR);
        }
         ?></td>
      </tr>

See the closing </form> tag above the call to the shipping estimator? Means any info entered ON the shopping cart page stops there for collection. Besides the next page (if not logged in) will be a redirect to the log in page, which is usually https://.

When they say 'shopping cart' I don't think they are referring literally to the page 'shopping_cart' ... they mean the checkout, ie where customers are supplying form information and in particular when this info goes to a payment gateway for processing and / or storage.

Simon

_________________
www.codemehappy.com
For Cre Loaded tips, how-to articles and more


Top
 Profile  
 
 Post subject: Re: shopping_cart.tpl not secure!
PostPosted: Wed Aug 10, 2011 10:17 am 
Offline
CRE Freak

Joined: Tue Jul 07, 2009 10:28 am
Posts: 69
Awesome, I guess I get it now. I'm no good at php, one of the things I want to learn, therefore I can't read it. Thanks so much, I always appreciate your help!


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 7 posts ] 

Board index » CRE Loaded Support » CRE Loaded 6.2

All times are UTC - 5 hours


Who is online

Users browsing this forum: No registered users and 3 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for:
Jump to:  
It is currently Wed May 23, 2012 8:42 pm
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group

Login

Forums Latest Activity

Top Listing

1. Cart2Cart - Shopping...
    Category: Shopping Cart Database Conversion Scripts
    
2. Points & Rewards PLUS!...
    Category: Add-Ons
    
3. Configuration Server...
    Category: Fixes
    
4. Credit Card with CCV
    Category: Payment Modules
    
5. CC7333_ATS
    Category: Templates
    
Show more...

© CRE Loaded is a product of Chain Reaction Ecommerce, Inc. Usage & Privacy Policy