Skip to main content

HTTP/HTTPS redirect problem with Apache

xenoware
Hi, I'm currently trying to get my Magento site up and running, but I keep running into a redirect problem. A couple of threads on the Magento forum later, I'm trying to find a solution. I've tried every possible configuration of Magento and at this point I'm not even sure it's related to Magento. Others have suggested it might be the webserver, but I haven't found the problem so far and the Magento forum is fairly quiet. It seems like my webserver is mixing unsecure and secure requests. - Removed - I'm running a fairly standard and unmodified cPanel setup with a LetsEncrypt auto-SSL config. My Wordpress sites don't experience this behaviour. Any suggestions on where I should start poking cpanel settings to resolve this? (Or is it certain this is not cPanel/Apache related?) Thanks!

Comments

11 comments

Date Votes
  • Dave Smith
    Hi, I've never used Magento but it sounds like the Base URL is incorrect (Wordpress also experiences the same issue now and again). You could try changing this to reflect https:// if it is not already set to do so...? A quick search revealed the following that may be helpful to you: How to change Magento base URLs Hope you get it resolved.
    0
  • xenoware
    Hi, I've never used Magento but it sounds like the Base URL is incorrect (Wordpress also experiences the same issue now and again). You could try changing this to reflect https:// if it is not already set to do so...? A quick search revealed the following that may be helpful to you: How to change Magento base URLs Hope you get it resolved.

    Already tried that, with pretty much every combination. I've tried http and https as a base URL, SSL settings, etc. It was my first guess as well, but neither of these configurations resolved my problem. - Removed - ^Magento config. I'll see if I can make an other clean install in a subdirectory and see if I can replicate the problem.
    0
  • rpvw
    As Dave mentioned, the configuration Base URL is often the culprit. It is worth auditing the code in your user created pages as well to ensure no fully qualified URLs got included. These will always cause mixed content alerts, and are stored in the database, so a simple find and replace at DB level is sometimes all it needs :)
    0
  • xenoware
    As Dave mentioned, the configuration Base URL is often the culprit. It is worth auditing the code in your user created pages as well to ensure no fully qualified URLs got included. These will always cause mixed content alerts, and are stored in the database, so a simple find and replace at DB level is sometimes all it needs :)

    That's what my first thought was too. I just reran the search query on my database, and a single entry comes up: the unsecure base URL (...) before and that didn't resolve the problem. I reverted back after that Besides, I'm making Magento enforce SSL on all data anyway (imgur.com/a/sepLP), so the base URL shouldn't even be used in the first place. Just as a test, to confirm what I already knew: 1. Changed both the unsecure and secure base URL to
    0
  • rpvw
    If you still have your rewrite rules enabled in .htaccess, I would rem them out for the purposes of debugging the magento settings, and once everything works, you can then re-introduce rules to rewrite to https if required.
    0
  • rpvw
    From what I am seeing at the moment, every time the page doesn't redirect properly, deleting the section_data_ids cookie fixes it. Hope this is of some help o_O
    0
  • xenoware
    If you still have your rewrite rules enabled in .htaccess, I would rem them out for the purposes of debugging the magento settings, and once everything works, you can then re-introduce rules to rewrite to https if required.

    Disabled rewrites - still calls unsecure content.
    From what I am seeing at the moment, every time the page doesn't redirect properly, deleting the section_data_ids cookie fixes it. Hope this is of some help o_O

    Thx Anyone with a suggestion of how to diagnose the origin of the unsecure content calls?
    0
  • cPanelMichael
    Disabled rewrites - still calls unsecure content.

    Hello, Did you check the account's home directory, the public_html directory, and the document root where the script resides to ensure no other .htaccess files include redirect rules? Thank you.
    0
  • xenoware
    Hello, Did you check the account's home directory, the public_html directory, and the document root where the script resides to ensure no other .htaccess files include redirect rules? Thank you.

    Just checked. No .htaccess in the home directory.
    0
  • cPanelMichael
    Hello, Feel free to open a support ticket using the link in my signature if you'd like us to take a closer look and rule out any cPanel & WHM settings or functionality as the culprit. Thank you.
    0
  • xenoware
    Solved. Turned out to be file ownership problems.
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post