Always-on SSL

[danh42]

I'd like every page, script, image, etc of my PrestaShop installation to be served over SSL. I have it enabled in the admin panel, but that only forces SSL on a couple important pages. I tried adding the following rule in my Apache config:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

However, a couple pages (such as product pages) seem to actually force HTTP, even when I put https:// in the URL. Besides being absolutely idiotic, this also causes a redirect loop when I use the code above.

Someone filed a bug report requesting that site-wide SSL be introduced as an option, which I think is a great idea, but it hasn't gotten any attention.

Short of manually modifying lots of files, is there an easy way I can get HTTP to be used on all pages?

[roband]

I ran into this problem as well, while trying to enable SPDY for my entire website, which again forces HTTPS.

 

There's some halfbaked patches for 1.4 in http:// http://forge.prestashop.com/browse/PSCFV-6689 but I'm really hoping someone has looked into this already and would be willing to share!

 

Cheers, Robert.

[roband]

If you want to experiment further I've added a patch for PrestaShop 1.5.5 to  http://forge.prestashop.com/browse/PSCFV-6689

Feel free to try it out. Works for me. No warranty.

 

Cheers, Robert.