Project Detail

Description

Project Summary:

1. Fix the following problem without disabling or breaking a customized http-to-https script unique to our website:

"Fatal error: Cannot redeclare security_service() (previously declared in
/home/bellscom/public_html/includes/modules/enforce_https.php:2) in
/home/bellscom/public_html/includes/modules/enforce_https.php on line 19"

Note: This problem occurs when visiting the mobile version of our site, located in the "/mobile" subdirectory

2. Modify v1.2.3 so that is shows all product categories when clicking on the "Store" icon (please make mods ONLY to "mobile" directory and not my current store in root folder)

3. Modify v1.2.3 to ensure current login functionality works on mobile version of site. (Please don't disable/break this functionality on current store in root folder)

Note: Nothing happens (no login fields appear) when clicking on the "Login" button in "mobile" state

4. Modify v1.2.3 configure.php file to account for any customized items currently listed in /catalog/includes/configure.php file

5. Fix the following error when attempting to checkout using mobile site:

"Fatal error: Call to undefined method payment::checkout_initialization_method() in /home/bellscom/public_html/mobile/shopping_cart.php on line 160"

6. Fix mobile version so that footer appears where it should

7. Ensure secure orders can be placed successfully with mobile devices

7a. Ensure order receipts are generated (sent via email) as they are now in the current full web browser version of my site (to the customer and store owner)

8. Create "Add to Favorites" functionality to mobile version if possible

9. Comment above and below all code alterations in the following format:

// BOC - Service Providers Name - Service Providers Email Address - Date 06/xx/2009 - Modification to allow for mobile store
// EOC - Service Providers Name - Service Providers Email Address - Date 06/xx/2009 - Modification to allow for mobile store

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

More Detailed Overview of Project:


This contribution is already installed, however, I am running into a problem. The problem:

This problem is associated with a customized https function another developer created for me. This function works as desired/expected in the full web version of my online store. However, I believe it is

preventing the mobile version from working properly.

The script I just mentioned transitions certain pages from HTTP to HTTPS:

File Name: catalog/shopping_cart.php

Code: <?php echo tep_draw_form('cart_quantity', tep_href_link(FILENAME_SHOPPING_CART, 'action=update_product', 'SSL')); ?>

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Filename: catalog/includes/configure.php


IMPORTANT NOTE! iosc v1.2.3 actually works partially when I disable the following code. However, I still need this to remain in place for the full web broswer version.

Code:

$secure_pages = array("login.php",
"create_account.php",
"shopping_cart.php",
"account_edit.php",
"address_book.php",
"account_pasword.php",
"order_history.php",
"account.php",
"checkout_confirmation.php",
"checkout_payment.php",
"checkout_payment_address.php",
"checkout_process.php",
"checkout_shipping.php",
"checkout_shipping_address.php",
"checkout_success.php");


include(DIR_WS_MODULES."/enforce_https.php");

security_service();
if(empty($_SERVER['HTTPS'])) define('URL',HTTP_SERVER);
else define('URL',HTTPS_SERVER);


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Filename: catalog/includes/modules/enforce_https.php

Code:

<?php
function security_service($enforce_http = true) {
global $secure_pages;

$current_file = basename($_SERVER['SCRIPT_FILENAME']);
if(in_array($current_file, $secure_pages) ) {
if(empty($_SERVER['HTTPS'])) {
header("Location: ".HTTPS_SERVER.$_SERVER['REQUEST_URI']);
exit;
}
}
elseif($enforce_http) {
if(!empty($_SERVER['HTTPS'])) {
header("Location: ".HTTP_SERVER.$_SERVER['REQUEST_URI']);
exit;
}
}

}
?>

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

CURRENT CONTRIBUTIONS/CUSTOMIZATIONS:

- Dynamenu - http://www.oscommerce.com/community/contributions,4228

- osCommerce PayPal IPN v1.1 (http://www.oscommerce.com/community/contributions,2679)

- Making PayPal Return Order Data
* Held Orders v2.02
* Held Orders Fix
* Held Orders UserAbandons Order

http://www.oscommerce.com/community/contributions,3819

- PayQuake Payment Module v1.0 (Harald Ponce de Leon - hpdl)

- Ultimate SEO URLs - 2.1d with optional Admin settable Product and Category URLs - 29 November 2006

- SEO Assistant V 1.3.3_full package (http://www.oscommerce.com/community/contributions,2370)

- SID Killer v1.2b - plus integrate with Ultimate SEO URLs - nfrobertson 12 Feb 2006

- Header Tags Controller 2.6.3 - jonatanvalencia 2 Mar 2007 (MadFobos Updated previous version v2.5.9)

- Spider Session Remover v1.0 (http://www.oscommerce.com/community/contributions,2819)

- Google position 1.3 (http://www.oscommerce.com/community/contributions,2336/category,all/search,Jack+York)

- Google XML Sitemap Feed (http://www.oscommerce.com/community/contributions,3233)

- RSS Feed 0.1 (http://www.oscommerce.com/community/contributions,1513)

- Froogle Data Feeder v 162d (http://www.oscommerce.com/community/contributions,3876)

- Printable Catalog 1.6 (http://www.oscommerce.com/community/contributions,234/page,18)

- VJ Links Manager for OSC v2.0 (http://www.oscommerce.com/community/contributions,1256/category,all/search,vj+links)

- Banner Ad in a box V1.1 by Aubrey Kilian (http://www.oscommerce.com/community/contributions,59/page,2)

- Banner Ads in Header (currently disabled)

- How Did You Hear About Us 1.4 (http://www.oscommerce.com/community/contributions,2159)

- Ask a Product Question 2.3 (http://www.oscommerce.com/community/contributions,1779)

- Newsdesk v1.48.3 Updated (http://www.oscommerce.com/community/contributions,934)

- Notify Admin of New Account v1.0.5 (Not functional) (http://www.oscommerce.com/community/contributions,3414)

- WYSIWYG Editor v1.9FR (http://www.oscommerce.com/community/contributions,1347)

- Newsletter Unsubscribe (http://www.oscommerce.com/community/contributions,913/category,all/search,newsletter+unsubscribe)

- Option Type Feature v1.71 within OSC MS2.2 (http://www.oscommerce.com/community/contributions,160)

- osCommerce Account Agreement Checkbox (http://www.oscommerce.com/community/contributions,3903)

- Store Pickup Shipping Module 1.05 1 2 (http://www.oscommerce.com/community/contributions,164/category/search,7626)

- Skype Contact v1.0 (http://www.oscommerce.com/community/contributions,4004/category/search,43895)

- Store Offline (www.vn2designs.com)

- Contact Us Subject Line (http://www.oscommerce.com/community/contributions,4017/category,all/search,Subject+line)

- Admin Notes v1.0 (http://www.oscommerce.com/community/contributions,2599/category,all/search,Admin+Notes+v2.0)

- FAQ System 2.1a (http://www.oscommerce.com/community/contributions,1948/category,all/search,faq)

- Tell a Friend (Custom functionality not based on a contribution)

- Bookmark Page (Custom functionality not based on a contribution)

- SiteMonitor: http://www.oscommerce.com/community/contributions,4441

- Imagecheck 1.2: http://www.oscommerce.com/community/contributions,572/category,all/search,Imagecheck+1.2

- Products Sort Order within Admin console

- Product Attributes Sort Order v1.0: http://www.oscommerce.com/community/contributions,1822/category,all/search,Sort+Product+Attributes+1.2

- Specials Page Displayed Like New Products Page: http://www.oscommerce.com/community/contributions,3355/category,all/search,Specials+Page+Displayed+Like+New

- Contact Us Email Subject

- close popup window v1.1 (http://www.oscommerce.com/community/contributions,1696/category,all/search,close+pop)

- jQuery Image Pop-up Manager (I believe close popup window v1.1 should have been replaced by jQuery) (MadFobos)

- Automatically notify admin via e-mail of new accounts

- Link in Box Title: http://www.oscommerce.com/community/contributions,3130/category,all/search,Link+in+Box+Title

- Proprietary HTML, PHP, and Javascript Code for "Manage Account" box and "Shopping Cart" box (MadFobos)

- Customer Never Loses Cart - Even without Sign In (http://www.oscommerce.com/community/contributions,4738)

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Terms and Conditions:

1. Acceptance of this project also serves as full agreement and acceptance of the following terms and conditions:

(a) Service Provider certifies he/she possesses extensive knowledge and a universally acceptable level of professional experience associated with the following:

* HTML
* CSS
* PHP
* mySQL
* OScommerce (All milestones, MS2.2 in particular)
* Javascript
* Database and web-based application security

2. Service Provider agrees to perform a full and complete backup of Service Buyers entire online store to include all databases, configurations, files, images, etc.

3. Service Buyer reserves the right to cancel this project, held harmless, and not be obligated to making payment for any services provided if:

(a) Service Provider fails to honor the timetable agreed upon for this project.

(b) Service Provider fails to respond to any/all e-mail communication, Instant Messages, and/or GAF messages sent by Service Buyer within 24 hours for each instance.

(c) Service Provider fails to ensure the above referenced customized contribution does not work as it should or as it is intended.

(d) Adversely impacts any functionality, contributions, and/or core code within our online store.

(e) Service Provider misrepresents his/her true professional/technical capabilities.

(f) Service Provider warrants he/she will not install any code, application, scripts, or alterations to pre-existing code that could, will, or would compromise website security.

4. Service Provider acknowledges he/she has adequate computer security in place to prevent the observation of or access to any and all information, files, folders, usernames, passwords, login URL's, etc.

associated with or applicable to this project.

5. Service Provider agrees to respond to all support requests made by Service Buyer within 4 hours for a period of 30 days after Service Buyer makes payment for this project. Service Provider furthermore

understands and agrees that support includes identifying and resolving any/all issues arising subsequent to the payment.

6. Service Provider agrees to permanently discard and/or destroy all usernames and passwords provided by Service Buyer subsequent to the completion of this project.

7. Service Provider agrees to consider requests made by Service Buyer to incorporate expanded functionality (for an additional fee) not yet realized by Service Buyer provided Service Provider possess the

technical ability to fullfull such requests.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~