I noticed the https issue too in my wp-ecommerce ver 3.7.4 installation- my GoDaddy installation would not allow images to download unless the correct http was there. Digging into the code, I found several places where $_SERVER[‘HTTPS’] is used to change the prefix to https. It looks like this is being addressed in version 3.7.5 (still in beta at this writing). The code was checking for this to be empty if https is not being used, however:
$_SERVER[‘HTTPS’] is set to a non-empty value if the script was queried through the HTTPS protocol… BUT when using ISAPI with IIS, the value will be “off” if the request was not made through the HTTPS protocol.
So the fix for me was to change:
if(!empty($_SERVER[‘HTTPS’])) to
if(!empty($_SERVER[‘HTTPS’]) && strtolower($_SERVER[‘HTTPS’]) != “off”)
Search for $_SERVER[‘HTTPS’] in the following scripts (under wp-content/plugins/wp-e-commerce/wpsc-includes) to catch the instances that need editing:
- display.function.php
- wpsc_query.php
- cart.class.php
- misc.functions.php
Hope this helps.