Community Forums 

Main Content

ww7 server - not showing secure on payment pages

    May 15 2015 14:44:29

    #1

    Chris

    Join date : 2008-09-18      Posts : 25

    When our customer leaves address page to enter payment gateway (sagepay uk), payment page does not show as secure. Although we use a template for unsecure pages, have tried with the secure template deleted but still same.

    Could it be an issue with the server or am I missing something in the setup ?



    May 16 2015 11:35:02

    #2

    GT

    Join date : 2008-09-18      Posts : 3207

    Your payment page is at Sagepay, you should be asking them (I think).

    Or are you saying the page at Mal's prior to the payment page is not https?

    If the latter...

    Messages and general settings
    SECURE PAGE FOR NAME AND ADDRESS

    From a security perspective there is no need to use secure pages for a name and address because we will be confirming these details in their (unsecure) email receipt but many people feel more confident if they see the "little lock".

    Use secure pages for name and address - checkbox <<<

    Having trouble with a form or need one building?
    Fast turnaround, but I do charge :)

    Mal's Forms / Scripts and the syntax are here.




    May 17 2015 11:17:15

    #3

    Chris

    Join date : 2008-09-18      Posts : 25

    Hi GT - many thanks for your input. When leaving the address details page and checking "pay by credit / debit card", the next page is the secure one with a plain header and the sage card details input framework embedded in the page. The address bar still shows http aitsafe ww7 address and not the sagepay address as the sagepay card details table is still embedded in the aitsafe page.
    As mentioned previously and importantly, the only template we are using for this test is in the unsecure (top) code box on the template set up - the secure box below is blank.
    One thought is possibly if we are using an unsecure template, is the system expecting a secure one as well ?
    From memory, if we delete all templates and let the system revert to the mals basic cart, the missing padlock issue still occurs.



    May 18 2015 09:38:33

    #4

    Chris

    Join date : 2008-09-18      Posts : 25

    Screenshot to further explain problem.
    Screenshot taken on the card details page - note the address bar does not read htpps hence no padlock.
    http://www.sofabedgallery.co.uk/templatefiles/payment_page.jpg



    May 18 2015 13:37:10

    #5

    Chris

    Join date : 2008-09-18      Posts : 25

    RESOLVED.

    Following advice from GT, set secure page for name and address checkbox, ensured all links in template resolve to https server, and voila - all running fine with padlock present on both address and card pages.

    Many thanks to GT and Mal Stewart for their advice.