Rank: Member
Joined: 1/15/2008(UTC)
Posts: 58
|
It seems I have UNencrypted access to our site when logging in through the web site, using the http://IPaddress.com/Login.aspxIts not redirecting to a secure page. How do I get around this. BVC5.3.0
|
|
|
|
|
|
Rank: Member
Joined: 11/5/2003(UTC)
Posts: 1,786
|
Only BV Commerce 5.7 and later are PCI compliant.
|
|
|
|
|
|
Rank: Member
Joined: 1/15/2008(UTC)
Posts: 58
|
is there any way I can get these pages or links to redirect to the normal url?
http://myIP/Login.aspx
http://myIP/MyAccount_Orders.aspx
http://myIP/MyAccount_WishList.aspx
or, is the upgrade to 5.7 somewhat seamless?
|
|
|
|
|
|
Rank: Member
Joined: 4/29/2010(UTC)
Posts: 256
Thanks: 4 times
Was thanked: 11 time(s) in 10 post(s)
|
Assuming you have an SSL Certificate.
Within the admin page Options > Security
On this page you should have Site Standard Root, Secure Site Root and Use SSL: option.
e.g.
Site Standard Root: http://myIP/
Secure Site Root: https://myIP/
Use SSL: checked
Then save your changes. If you have access to the source code make sure you or your developer has not made any amendments to the pages in question. I cannot post the code as that is protected by copyright; however you need to find the following files
Login.vb
MyAccount_Orders.vb
MyAccount_WishList.vb
Look for a property called RequiresSSL (it should be near the top), this property should return True.
Restart your web application (may not be required) and hopefully these will pass your PCI scan. However as Marcus has said only BV Commerce 5.7 and later being fully PCI compliant, and therefore you will not be able to successfully complete the questionnaire.
|
|
|
|
|
|
Rank: Member
Joined: 1/15/2008(UTC)
Posts: 58
|
BVC 5.3 has been passing the PCI scans until the IP hick up.
The techs at Applied I were able to block the IP access. Now we are all good again.
Thanks for the replies and help.
R.
|
|
|
|
|
|
Forum Jump
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.