Why doesn't this script detect a secure installation or offer SSL options during setup?

[Lewis7474]

Disappointingly, Prestashop forums do not have a suggestions board, and I don't think the bugs or developers areas are appropriate for this.

When installing, all went well, but the next time I accessed the shop, I had a browser error that the page wasn't redirecting properly.

After some googling, and getting past some suggestions for php.ini edits which failed, I saw one that it was because the SSL settings were not enabled.

Thankfully I found my admin login URL via FTP... but I couldn't dismiss the Onboarding options in the bottom right. Thankfully I could inspect the element and delete the code, revealing the menu options to the settings area, where I could enable SSL.

My question is, why is this not more intuitive? I've used a LOT of scripts in my time - forums, ecommerce (including CS Cart and Open Cart), content anagement, contact forms, and others, and with not a single one have I had problems with the website having redirect problems because SSL wasn't enabled.

Pretty much all of them worked regardless of if I accessed them securely or not, and most if not all were also able to detect I was installing via a https secure link, or offer the SSL options during the installation, which PrestaShop did not.

Just wondering why in 2020 this is a problem - and according to Google, faced quite often too - for a script that seems to be, overall, well made? This is by no means a crappy or janky script so seems like a bit of an oversight?

[jetway]

Hi,

I am not sure what you're talking about, but Prestashop is pretty straight forward in that concern. First of all, an SSL Certificate needs to be present and valid for your domain. Second, when signing into the BE, which is by default set to www.yourdomain.com/admin123 (if installed via Softaculous), you can switch on SSL on all pages. Prestashop will then automatically redirect to HTTPS. (Even the installation Process can be run under HTTPS.) Third, it's not a Prestashop issue if you cannot remember your backend URL. By the way, it can be set to whatever you like. 
I am also not sure why you are deleting code, that's always a terrible idea. Onboarding can be deactivated by click on stop Onboarding or disabling or uninstalling the Module in the Module section.

Anyways, have fun, enjoy prestashop and have a nice day.

 

[Lewis7474]

  On 5/11/2020 at 4:27 PM, jetway said:

Hi,

I am not sure what you're talking about, but Prestashop is pretty straight forward in that concern. First of all, an SSL Certificate needs to be present and valid for your domain. Second, when signing into the BE, which is by default set to www.yourdomain.com/admin123 (if installed via Softaculous), you can switch on SSL on all pages. Prestashop will then automatically redirect to HTTPS. (Even the installation Process can be run under HTTPS.) Third, it's not a Prestashop issue if you cannot remember your backend URL. By the way, it can be set to whatever you like. 
I am also not sure why you are deleting code, that's always a terrible idea. Onboarding can be deactivated by click on stop Onboarding or disabling or uninstalling the Module in the Module section.

Anyways, have fun, enjoy prestashop and have a nice day.

 

Expand  

Hello, I'm not sure how I can clarify, but basically loads of people on Google have had problems with getting redirect errors and being unable to access the front end of the shop when the domain has certificate but the SSL options in the control panel are set to on. Every other script I have used will not cause a redirecting loop in the same circumstances.

My domain does have SSL, and valid, the admin URL is randomly generated when installed via a manual file upload and using the installer, and it's completely bugged out to change the SSL to on when it installed with it being off, even though I had a certificate the entire time. That is not normal behaviour.

The admin link is kind of a prestashop issue, but isn't really relevant to my main point anyway. Prestashop installs an admin panel to "admin" and a bunch of letters and numbers like "admin4vdf43". I appriciate the security of that but I did not get given a choice to turn this off during the installer, but this isn't part of the SSL problem itself.

Deleting code was deleting content from the inspect element tool. It does not delete actual code, it deletes content from the browser on that site, and not from actual files or a database, it is literally just removing the content and styles of the page you're looking at, and refreshing the page reverses all changes. And as I clarified in the post, pressing the stop onboarding button does not work with the SSL problem still there

[tomerg3]

Not sure what PS version you are using. It sounds like your host offers some autoinstaller, which could be the issue.

I've never came across this while loading PS directly to the server.

[Lewis7474]

  On 5/11/2020 at 4:49 PM, tomerg3 said:

Not sure what PS version you are using. It sounds like your host offers some autoinstaller, which could be the issue.

I've never came across this while loading PS directly to the server.

Expand  

I'm using the latest from the website. It's my own VPS with cPanel and WHM, and I do not have an autoinstaller installed. I manually uploaded the php files and installed it myself.

When I googled the redirect problem there were quite a few results including to these forums of other people with redirect problems :o