I'm going crazy here with Drupal 6.10, Ubercart 2.0-beta6, the Secure Pages 1.7 module, and SSL.
The problem is, whenever the user goes from HTTP to HTTPS by clicking on "Add to cart", the session information is lost and the cart becomes empty.
I've read other posts, discussing the $cookie_domain, $base_url, session.cookie_secure, etc. I have changed these values to no avail. I'm currently trying the following in the site's settings.php file:
if (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == 'on') {
$base_url = 'https://ssl.shared-domain.com/client';
//$cookie_domain = 'ssl.shared-domain.com';
//ini_set('session.cookie_secure', 1);
} else {
$base_url = 'http://client-domain.com';
//$cookie_domain = 'client-domain.com';
//ini_set('session.cookie_secure', 0);
}
Setting the $cookie_domain to either URL above doesn't work. I've tried clearing the drupal_sessions table and deleting all cookies on my browser.
We host numerous domains all from the same server, including the SSL site. All of them use one common domain for HTTPS. We are moving forward with Drupal and are trying to get Ubercart working. The domains are hosted under one base Drupal install in the sites directory.
I have installed the Secure Pages module and configured it to handle all pages with "cart*" in the URL. I'd rather not have to make the entire client site HTTPS to fix the session problem.
Any ideas would be greatly appreciated!
