On the computer SSL shows a padlock and works fine.
On mobile circle with ! inside and if you go to our instruction sheet the moment you type in the search bar red triagle with ! in address bar and locks the search bar. Remember all this works fine on a computer it is mobile only


Craig Matheny
LazerMmodels.com

Hi Craig

Are you referring to the videos.php page?

One thing I noticed visiting your site is that you are not forcing people onto https which I think you should do via the .htaccess file. Also set your store url in the admin to https.

Andy

Please feel free to review / rate our software

yes that is the page this is the settings...

The Store URL should be the base URL of your store, including directory name if you have placed your store in a sub directory. For example:
http://www.lazermodels.com/
Store URL:
https://www.lazermodels.com/
This should be the base URL of the secure / HTTPS part of your site. Many payment processors do not require your checkout to be on HTTPS, but it is becoming increasingly recommended. For example:
https://www.lazermodels.com/
HTTPS Store URL:
https://www.lazermodels.com/

Am i missing something here?

how do I force https on the htacess?

Why does the site on the computer work but not phone?
thank you



Craig Matheny
LazerMmodels.com

There's a thread here with examples of what can be used to force https

https://www.ecommercetemplates.com/support/topic.asp?TOPIC_ID=106851

Andy

Please feel free to review / rate our software

Andy I already have this all in my htaces from ITZAP.
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^category/([^/.]*)/?$ /categories.php?cat=$1 [QSA,nc,L,B]
RewriteRule ^products/([^/.]*)/?$ /products.php?cat=$1 [QSA,nc,L,B]
RewriteRule ^manufacturer/?$ /categories.php?man=all [QSA,nc,L,B]
RewriteRule ^manufacturer/([^/.]*)/?$ /products.php?man=$1 [QSA,nc,L,B]
RewriteRule ^([^/.]+)$ proddetail.php?prod=$1 [QSA,nc,L,B]
</IfModule>

# ======================================================
# 404 INFO
# ======================================================
ErrorDocument 404 /404.html

# ======================================================
# Disable problematic ETag header since we are going to use Expires
# ======================================================
Header unset Pragma
FileETag None
Header unset ETag
# ======================================================
# Set Cache-Control and Expires headers
# ======================================================
<FilesMatch "\.(ico|jpg|jpeg|png|gif|js|css|swf|pdf|flv|mp3)$">
<IfModule mod_expires.c>
ExpiresActive on
ExpiresDefault "access plus 14 days"
Header set Cache-Control "public"
</IfModule>
</FilesMatch>
<FilesMatch "\.(html|htm|xml|txt|xsl)$">
Header set Cache-Control "max-age=7200, must-revalidate"
</FilesMatch>
# -----------------------------------------------------------------------
# Defining MIME types to ensure the web server actually knows about them.
# -----------------------------------------------------------------------
<IfModule mod_mime.c>
AddType text/css .css
AddType application/javascript js
AddType application/vnd.ms-fontobject eot
AddType application/x-font-ttf ttf ttc
AddType font/opentype otf
AddType application/x-font-woff woff
AddType image/svg+xml svg svgz
AddEncoding gzip svgz
</Ifmodule>
# ======================================================
# Activate Gzip compression
# ======================================================
<IfModule mod_deflate.c>
AddOutputFilterByType DEFLATE text/html text/plain text/css application/json
AddOutputFilterByType DEFLATE application/javascript
AddOutputFilterByType DEFLATE text/xml application/xml text/x-component
AddOutputFilterByType DEFLATE application/xhtml+xml application/rss+xml application/atom+xml
AddOutputFilterByType DEFLATE image/x-icon image/svg+xml application/vnd.ms-fontobject application/x-font-ttf font/opentype
<IfModule mod_setenvif.c>
BrowserMatch ^Mozilla/4 gzip-only-text/html
BrowserMatch ^Mozilla/4\.0[678] no-gzip
BrowserMatch \bMSIE !no-gzip !gzip-only-text/html
</IfModule>
<IfModule mod_headers.c>
Header append Vary User-Agent env=!dont-vary
</IfModule>
</IfModule>

Do I just add the new items or what?

# rename file .htaccess
AddDefaultCharset UTF-8
<ifModule mod_headers.c>
# Enable HSTS (HTTP Strict Transport Security), tells the browser to ALWAYS USE HTTPS
Header always set Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" env=HTTPS
# Enable HTTP Keep-Alive to allow the same TCP connection to send and receive multiple HTTP requests, thus reducing the latency for subsequent requests
Header set Connection keep-alive
</ifModule>
# ======================================================
# URL Rewrite Rules (-Indexes prevents visitors viewing website folder contents, 403 Access Forbidden)
# ======================================================
<IfModule mod_rewrite.c>
Options +FollowSymlinks -Multiviews -Indexes
RewriteEngine On
RewriteBase /
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https:// example.com/$1 [R,L]
# REDIRECT www
RewriteCond %{HTTP_HOST} ^www\.example\.com$ [NC]
RewriteRule ^(.*)$ https:// example.com/$1 [R=301,L]
# REDIRECT index.php (THIS DOES NOT EFFECT SUBFOLDERS !!)
RewriteCond %{THE_REQUEST} ^[A-Z]{3,9}\ /index\.php\ HTTP/
RewriteRule ^index\.php$ https:// example.com/$1 [R=301,L]
</IfModule>
thanks

Craig Matheny
LazerMmodels.com

If I type in the address bar

http://www.lazermodels.com/

I'm not forwarded to to https - are you?

Andy

Please feel free to review / rate our software

No just always typed in lazermodels.com and it went ssl now I am lost. I thought after you buy the SSL and set the store up with the HTTPS: that made it automatically ssl. Not so? Obviously I need some help on this.

Craig Matheny
LazerMmodels.com

Actually I would just add this which is probably simpler

RewriteEngine on

RewriteCond %{HTTP_HOST} ^www\.(.*)$ [NC]
RewriteRule ^(.*)$ https://%1/$1 [R=301,L]

RewriteCond %{HTTPS} !on
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]

Andy

Please feel free to review / rate our software

So just add...

RewriteCond %{HTTP_HOST} ^www\.(.*)$ [NC]
RewriteRule ^(.*)$ https://%1/$1 [R=301,L]

RewriteCond %{HTTPS} !on
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]

In the group below?

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
RewriteRule ^category/([^/.]*)/?$ /categories.php?cat=$1 [QSA,nc,L,B]
RewriteRule ^products/([^/.]*)/?$ /products.php?cat=$1 [QSA,nc,L,B]
RewriteRule ^manufacturer/?$ /categories.php?man=all [QSA,nc,L,B]
RewriteRule ^manufacturer/([^/.]*)/?$ /products.php?man=$1 [QSA,nc,L,B]
RewriteRule ^([^/.]+)$ proddetail.php?prod=$1 [QSA,nc,L,B]
</IfModule>

Craig Matheny
LazerMmodels.com

Yes, just add it to the file and let us know how it goes.

Andy

Please feel free to review / rate our software