IE6 security alert - redirected to non secure connection

[zubenubi]

Hey there, having a wee problem with ssl nonssl, but it only seems to be a problem in IE6

If I go to my main page (in IE6) and click on login it brings me to the login page where I type in my username and password and then click login. At this point I get the error message: security alert - you are about to be redirected to a connection which is not secure.

I know this has got something to do with ssl's and I read elsewhere that this occurs mostly where there is a hard coded link.

in my tpl_header I have this link for the login:
<a href="<?php echo zen_href_link(FILENAME_LOGIN, '', 'SSL'); ?>" rel="nofollow"><?php echo HEADER_TITLE_LOGIN; ?></a>

I thought maybe it was because of the SSL, but I changed that to NONSSL and it still threw up that error.

I'm a bit confused about what to do next.

If anybody had any suggestions I'd be really grateful.

my site is http://www.bigmenslargeclothes.co.uk username- test AT gmail DOT com password-testing

[slomojojo]

Don't mess around with the header file.

I'm using IE6 and I don't get any error on your SSL login page, it works fine. Empty your browser cache and try it again.

[zubenubi]

I have done (ctrl F5? right?) a bunch of times. I always get the error. hummmm...

[slomojojo]

I have done (ctrl F5? right?) a bunch of times. I always get the error. hummmm...

I dunno about a shortcut. I clear it in Control Panel > Internet Settings

[gjh42]

The login link you show is not hard-coded; "hard-coded" means a plain <a href="http://yourdomain.com/whatever".

[zubenubi]

I dunno about a shortcut. I clear it in Control Panel > Internet Settings

I went into controlPanel>internet options and deleted all internet history, browsing history, temp files, cookies etc... but still I get this error?!?

I think it's something to do with that when you click the login button it's going from:
https://www.bigmenslargeclothes.co.uk/login - with the httpS
to
http://www.bigmenslargeclothes.co.uk

but if I haven't hard coded any links then how come it doesn't stay httpS?

[zubenubi]

Hey there, I'm still struggling with this. I've tried it on a couple of different machines now all through ie6 and I'm still getting the error so it must not be anything to do with my browser cache.

I just don't get why it goes from https on the login page to http after you click login. I've checked on a couple of other zencarts too and they stay on https when you login but I'm buggered if I can figure out why this one doesn't. I haven't made very many changes to how it runs - only really how it looks and I wouldn't have touched anything that I didn't understand.

If anyone is kind enough to help me my site is at http://www.bigmenslargeclothes.co.uk
and to test to see what i mean you can try logging in (using ie6) with
username- test AT gmail DOT com
password-testing

[Vger]

It's nothing to do with Zen Cart and neither is it anything to do with the version of IE you are using.

Under Tools --> Internet Options -->Advanced there is a setting which says something like "Warn if being redirected to non-secure url", which you have ticked. You just need to untick it again.

Vger

[slomojojo]

Yeah, Vger's right. I mis-read your first post. I thought you were getting an unsecured objects warning on a secure page. That's a common issue with IE6, and what all those posts referring hard coded links are about.

The warning you're talking about is when you switch between secure (https) and non-secure (http) pages. That warning's on by default and can be turned off under the advanced tap, like vger said.

The bottom line is, your SSL is working correctly. Nice looking site, BTW.

[zubenubi]

It's nothing to do with Zen Cart and neither is it anything to do with the version of IE you are using.

Under Tools --> Internet Options -->Advanced there is a setting which says something like "Warn if being redirected to non-secure url", which you have ticked. You just need to untick it again.

Vger

Yeah, Vger's right. I mis-read your first post. I thought you were getting an unsecured objects warning on a secure page. That's a common issue with IE6, and what all those posts referring hard coded links are about.

The warning you're talking about is when you switch between secure (https) and non-secure (http) pages. That warning's on by default and can be turned off under the advanced tap, like vger said.

The bottom line is, your SSL is working correctly. Nice looking site, BTW.

Hi guys, thanks for the replies. And thanks slomojojo for the compliment.

If the default setting is for a warning to appear then is it possible for me to not switch between https and http?

In other zencarts I have tested this in it doesn't move from https to http when you login. My cart is a version 1.3.7 and i've checked other 1.3.7 carts

is there a setting somewhere in some file?

thanks