[ic] "Secure" basket

Jonathan Clark interchange-users@icdevgroup.org
Thu May 29 10:03:00 2003


> I've just enabled ssl on my site for the first time, and have discovered a
> rather annoying problem that didn't show up beforehand.
>
> When the user goes to the basket page, the URL is insecure which
> is correct.
> When they click through to the checkout the secure=1 on the form passes
> control to the secure pages which is also correct.
>
> The problem is that if the user clicks recalculate, empty basket
> or continue
> shopping in the basket page, they are redirected to the secure site rather
> than the normal one. I checked the demo site at icdevgroup and it behaves
> the same way.
>
> The only way around this that I can think of is to insert an intermediate
> page between the basket and the checkout that handles the move from secure
> to insecure more gracefully.

I guess the fastest would be to force the basket to always be secure using,
er, AlwaysSecure:

http://www.icdevgroup.org/i/dev/docfly.html?mv_arg=icconfig05%2e04

Jonathan
www.webmaint.net