Letting customers know the site is secure

fearthespear · #1 07-11-2003, 03:51 PM

A customer told me my site is not secure and that is why he will not order from it. I used shared SSL (https) so the website is secure, right?

Is there any graphic or text I can put on the site proving that it is secure?

shan · #2 07-11-2003, 04:07 PM

You could add a logo or something that says its secure and maybe have some ALT text that explains things

fearthespear · #3 07-11-2003, 04:07 PM

I understand that there are secure and insecure things in xcart, so what would be the appropriate text to put in the header graphic?

"When ordering this website is secure with SSL"

"This website uses SSL for all orders"

I am not good with words as you can tell...

fearthespear · #4 07-11-2003, 04:08 PM

Thanks Shan but XCART has secure and insecure pages, right? Not all pages start off with https:

...

shan · #5 07-11-2003, 04:13 PM

right, you dont need all pages secure, only the ones that have sensitive info on them.

prismsoft_xcart · #6 10-06-2003, 05:57 AM

Yes..Not all pages are secure..for example cart.php needs to be executed via https..if i want some other php file also to be accessed thru https,
how to do it ?

Thanx,
ram

B00MER · #7 10-06-2003, 10:06 AM

Edit customer/https.php:

Code:

$https_scripts = array("cart.php","register.php","help.php?section=contactus&mode=update","giftcert.php");

Replace the $https_scripts = array(... with the above.

One thing to make sure is that your trans_sid is set to true in your php.ini so the session doesn't append to the url of your site.

Secures all areas a user inputs sensitive data.

ledbettergroup · #8 11-09-2003, 05:54 PM

Thanks Boomer! I was pulling my hair out.

B00MER · #9 11-09-2003, 08:15 PM

Just a note, its always a good idea to password protect the xcart/admin/ directory as well as accessing it via https:// keeps from prying eyes

lanawhittaker · #10 11-13-2003, 07:54 AM

I get a Page Not Found error when I try to access my site via HTTPS...is this a problem with my server? Should I be contacting them? Or do I need to set something up within X-Cart?