Support

February 13, 2014 at 11:12 pm

Hi Dean,

Tried but still getting same issue. When I’m using WP HTTPS it doubles the parameters in the url (EE pages). I tried to remove the duplicate parameter (regevent_action=show_shopping_cart) and still having this empty cart issue.

February 16, 2014 at 6:39 pm

Hi,

So this is what I did, Tried Better WP Security, I modify the function.php to use https to load the ajax and js. If I check it in the console there is no js or ajax that are being blocked. Is could it be a server issue?

February 25, 2014 at 1:33 am

Hi Sidney,

Tried to contact the hosting regarding to the apache security, and tried to disable ” brute force attack protection on WordPress sites” but still getting same issue.

February 26, 2014 at 11:02 pm

Hi,

Still getting same issue (cart is empty). In firefox it just displaying the loading gif forever. There are no errors in the console too.

The site is using Event Espresso HTTPS plugin, settings:

Internal HTTPS Elements = checked

Force Shared SSL Admin = checked

Here is my .htaccess codes:

<code># BEGIN WordPress

&lt;IfModule mod_rewrite.c&gt;
RewriteEngine On 
RewriteBase /
RewriteRule ^index\.php$ - [L]
RewriteRule ^shop/images/(\d+)/?\??(.*)$ /wp-content/plugins/shopp/services/image.php?siid=$1&amp;$2 [QSA,L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule . /index.php [L]
&lt;/IfModule&gt;

&lt;Files wp-login.php&gt; 
Satisfy Any 
Allow from all
&lt;/Files&gt;

&lt;Files admin-ajax.php&gt;
	Satisfy any
    Allow from all
&lt;/Files&gt;

&lt;Files admin-ajax.php/css/install.css&gt;
    Satisfy any
    Allow from all
&lt;/Files&gt;
 
# END WordPress</code>

February 27, 2014 at 6:14 pm

Hi Tony,

No, Event Espresso HTTPS Plugin is disabled when I use WP HTTPS/Better WP Security. For the js that is causing an error in the console only happens in homepage template and already fixed it (thanks for noticing that).

Using WP HTTPS/Better WP Security still getting same issue. Could it be a server issue? When viewing the site information in event registration page it stated something like this “The connection usses TLS 1.0. The connection is encrypted using AES_256_CBC, with SHA1 for message authentication and DHE_RSA as the key exchange mechanism. The server does not support TLS renegotiation extension”.

March 10, 2014 at 3:17 am

Hi,

So we contacted the hosting and asking about some information. Can someone please answer?

Why is the discount applied using ajax rather than actually just server side? How does SSL relate in all this?
Are they saying that by simple enabling SSL Renegotiation, it will be fine? However, SSL Renegotiation is not secure prior to TLS 1.2 if I remember correctly. This is why we have disabled it. Who is insisting on the SSL renegotiation, is it Chrome (which then implies that there’s some sort of ajax involved?)

Thanks

March 11, 2014 at 7:01 pm

Hi Josh,

The session save path is writable.

March 13, 2014 at 12:47 am

Hi Josh,

Seems like the “Shopp” plugin is causing it. It is now working but another issue occurred. If I am logged in in the back end it works just fine but If I am logged out this error is showing in the console

“XMLHttpRequest cannot load [website url]. No ‘Access-Control-Allow-Origin’ header is present on the requested resource. Origin ‘[website url]’ is therefore not allowed access.”

March 16, 2014 at 7:09 pm

Hi,

Actually its not the issue was not cause by jquery.cycle.2.js.map. It was something else in functions.php. Its resolved now. Thank you for the great assistance.