Skip to content

Commit

Permalink
SSL related changes
Browse files Browse the repository at this point in the history
  • Loading branch information
scottcwilson committed Aug 30, 2020
1 parent 4d9da09 commit 04646f2
Show file tree
Hide file tree
Showing 18 changed files with 106 additions and 35 deletions.
11 changes: 10 additions & 1 deletion content/dev/code/Modules/clone_shipping.md
Original file line number Diff line number Diff line change
Expand Up @@ -15,8 +15,17 @@ The language file is located in:
`/includes/languages/english/modules/shipping/flat.php`

To clone this module, for example, to `flatfree.php` you would copy the two `flat.php` files to `flatfree.php`

**Note:** Be sure the filename you choose does not have an underscore (`_`) in it.

Next, you need to edit all occurrences of `flat` to `flatfree` and `FLAT` to `FLATFREE` These identifiers are case sensitive.
Next, you need to change all occurrences of the strings `flat` and `FLAT` as follows:

OLD | NEW
----|----
`flat` | `flatfree`
`FLAT` | `FLATFREE`

These identifiers are case sensitive.

These words are written separately or within the constants such as:

Expand Down
Binary file added content/images/check_new_version.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added content/images/expired_certificate.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added content/images/ff_broken_padlock.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added content/images/good_cert_details.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added content/images/good_padlock.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file modified content/images/insecure_cart.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added content/images/not_secure_invalid.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added content/images/not_secure_mixed.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
4 changes: 4 additions & 0 deletions content/user/admin_pages/admin_new_version_available.md
Original file line number Diff line number Diff line change
Expand Up @@ -13,4 +13,8 @@ the top right hand side of your Admin page, reminding you to upgrade.

This message can be disabled by setting `Show if version update available` to `false` in [Admin > Configuration > My Store](/user/admin_pages/configuration/configuration_mystore/).

When you do that, instead of a new version announcement, you'll see a link that allows you to check for a new version.

![Check for New Zen Cart Version](/images/check_new_version.png)

In addition to this message, [subscribing to release announcements](/user/about_us/announcements) is a great way to stay informed about new releases and security updates.
12 changes: 12 additions & 0 deletions content/user/installing/enable_ssl.md
Original file line number Diff line number Diff line change
Expand Up @@ -69,3 +69,15 @@ do not have `HTTPS_SERVER` in the

After making these changes, if you don't clear your browser's cache and cookies, it's possible that your logins will not work because the browser is remembering information from the old URL. A simple clearing of the cache and cookies, and sometimes a restart of the browser application, is all it takes.

# 5\. Your site is now secure!

Once your done, your browser's address bar will show a non-broken padlock like this:

![Good Padlock](/images/good_padlock.png)

and if you click on your SSL certificate, you'll see it's valid, like this:

![Good Certificate Details](/images/good_cert_details.png)

You will want to keep checking your SSL certificate as part of your [regular website maintenance](/user/running/regular_maintenance/) so that you don't get a [broken padlock](/user/running/broken_padlock/).

7 changes: 1 addition & 6 deletions content/user/payment/payment.md
Original file line number Diff line number Diff line change
Expand Up @@ -9,9 +9,7 @@ Payment modules allow you to collect or arrange payment for an order.

The list of available payment modules may be seen by going to [Admin > Modules > Payment](/user/admin_pages/modules/payment/).

### Built-in Payment Modules

The following modules are built-in to Zen Cart:
Zen Cart has a number of built-in payment modules:

- Authorize.net - both [AIM](/user/payments/authorizenet_aim/) and [SIM](/user/payments/authorizenet_sim/) are available
- Check/Money Order - Receive payment by check
Expand All @@ -23,11 +21,8 @@ The following modules are built-in to Zen Cart:
If you are just evaluating Zen Cart or running a test-only installation,
then using the Check/Money Order module to process payments is the best option.

### Available Modules
More payment modules may be found in the [Payment module section of the Plugins Library](https://www.zen-cart.com/downloads.php?do=cat&id=8).

### Creating A Module
Developers wishing to create a payment module should see the [dev FAQs on modules](/dev/code/modules/).

### Finding A Payment Provider
If you don't already have an account, please use these [direct links to the payment processors Zen Cart supports](https://www.zen-cart.com/content.php?14-Payment-Processing). By signing up via one of our links, you help support the Zen Cart project with small commissions that these providers give back to Zen Cart. Thank you in advance.
12 changes: 12 additions & 0 deletions content/user/running/admin_activity_logs.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
---
title: Admin Activity Logs warning message
description: What should I do about logs over two months old?
category: Running
weight: 10
---

If you are receiving the message, "The Admin Activity Logs table has records over 2 months old and should be archived to conserve space"

![Zen Cart Admin Activity Log button](/images/admin_activity_log.png)

Follow the [procedure to purge old logs](/user/admin_pages/admins/admin_activity_logs/#purging-logs).
43 changes: 43 additions & 0 deletions content/user/running/broken_padlock.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,43 @@
---
title: Broken Padlock
description: Why does my site show as insecure?
category: Running
weight: 10
---

A _broken padlock_ is what you get when your website is not fully secured.
It's called a "broken padlock" because browsers used to show an image of a broken padlock in the address bar.

![Firefox Insecure Cart](/images/ff_broken_padlock.png)


Some browers will simply display a message saying "Not Secure" like this:

![Insecure Cart](/images/insecure_cart.png)


## Common Causes of broken padlock.

#### Mixed Content

Mixed content means although the page is being referenced using SSL (i.e. it starts with `https://`), some of the internal references are non-SSL. Generally this indicates that you are loading images, fonts, CSS or javascript over `http` rather than `https`.

If you see a "Not Secure" message, but click on the message and see a valid certificate, the problem might be caused by mixed content.

![Insecure Cart](/images/not_secure_mixed.png)


If you do a "View Source" in your browser and search for "http://" you can often find the root cause quickly. If you need more help, the [find http references](https://www.zen-cart.com/downloads.php?do=file&id=2197) plugin builds a report on issues like this.

#### Expired SSL Certificate

SSL certificates must be renewed, and you forget to renew (or the credit card you use to auto-renew is expired). You'll get a broken padlock.

Clicking on the message will show a dialog like this:

![Insecure Cart - invalid cert](/images/not_secure_invalid.png)

Clicking on the Certificate line will show a dialog like this:

![Insecure Cart](/images/expired_certificate.png)

9 changes: 9 additions & 0 deletions content/user/running/order_status.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,9 @@
---
title: Adding an order status
description: What if I want a new order status?
category: Running
weight: 10
---

See [Orders Status](/user/admin_pages/localization/orders_status/) for instructions on adding a new order status.

14 changes: 14 additions & 0 deletions content/user/running/regular_maintenance.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,14 @@
---
title: Regular Periodic Maintenance
description: What you should do to keep your store running well
category: Running
weight: 1
---

This is a partial list of regular maintenance activities you should do on your store. Try to do these things once a month.

- Make a [database backup](/user/running/backup/)
- [Archive and purge old admin activity logs](/user/admin_pages/admins/admin_activity_logs/#purging-logs)
- Investigate any [debug logs](/user/troubleshooting/debug_logs/) which are present in your `/logs` folder
- Check to see if there is a [new Zen Cart version available](/user/admin_pages/admin_new_version_available/) and schedule your [upgrade](/user/upgrading/) if you need to upgrade
- Check your SSL certificate - they do expire and need renewing, and if there's a glitch (like your credit card expired), you will have the dreaded [broken padlock](/user/running/broken_padlock/).
28 changes: 0 additions & 28 deletions content/user/running/running_misc.md

This file was deleted.

1 change: 1 addition & 0 deletions content/user/shipping/shipping.md
Original file line number Diff line number Diff line change
Expand Up @@ -26,3 +26,4 @@ Zen Cart also integrates with a number of shipping vendors using plugins:

More shipping plugins may be found in the [Shipping module section of the Plugins Library](https://www.zen-cart.com/downloads.php?do=cat&id=11).

Developers wishing to create a shipping module should see the [dev FAQs on modules](/dev/code/modules/).

0 comments on commit 04646f2

Please sign in to comment.