whynopadlock shows aform ssl error

[marvin]

Hi,
I checked my website *ourceforherb*.com with whynopadlock and one of the problems was (* is an s):

-------------------
Insecure <form> call.
Found on line # 80 in file: www.sourceforherbs.com/index.html

(Note: Chrome will show a security error for any secure page with an insecure <form> call on the page)
---------------------

Line 80 is:

<div id="searchContent" class="sideBoxContent centeredContent"><form name="quick_find" action="http://www.*ourceforherbs.com/index.php?main_page=advanced_search_result" method="get"><input type="hidden" name="main_page" value="advanced_search_result" /><input type="hidden" name="search_in_description" value="1" /><input type="text" name="keyword" size="18" maxlength="100" style="width: 120px" value="Enter keywords here" onfocus="if (this.value == 'Enter keywords here') this.value = '';" /><br /><input type="submit" value="Search" style="width: 50px" /><br /><a href="http://www.*ourceforherbs.com/index.php?main_page=advanced_search">Advanced Search</a></form></div></div>
---------------------------------

How do I fix this and in what file???

Thanks
Marvin S.

[mc12345678]

Well there are several issues it seems. One, why do you have a index.html and not index.php as provided by ZC?
Two, why is the index/main_page encrypted, and three, probably going to get a lot of those type chrome issues if not mistaken, because the majority of form calls are representative of the need for the next form more than the current...

Though it would also help to know what version of ZC you are using, and possibly what template is installed as things like this are/can be template specific.

[marvin]

Thanks for your quick reply.

Take my answers as coming from a slightly technical novice.
1- Zen version is 1.3.9h, Template is Sophie Blue.
2- Where do you see index.html?
3- I can't answer the encryption question as I did not do anything specifically that would have encrypted this page
3- This is the only form problem found by whynopadlock

Thanks,

Marvin S.

[mc12345678]

Thanks for your quick reply.

Take my answers as coming from a slightly technical novice.
1- Zen version is 1.3.9h, Template is Sophie Blue.
2- Where do you see index.html?
3- I can't answer the encryption question as I did not do anything specifically that would have encrypted this page
3- This is the only form problem found by whynopadlock

Thanks,

Marvin S.

Insecure <form> call.
Found on line # 80 in file: www.sourceforherbs.com/index.html

It may be a "generic" response from the program doing the search/test, but it didn't seem right.

So did you send whynopadlock to only investigate the main page or several other pages? Such as the login page, or the checkout page?

[marvin]

Main page only.

[DrByte]

Simple solution: edit your /includes/configure.php file and set ENABLE_SSL to 'true' instead of 'false'.
Also make sure HTTPS_SERVER is defined to start with 'https://' and not 'http://'

[marvin]

Dr. Byte,

Still getting this error - Insecure <form> call. Found on line # 80 in file: - after I made the changes you recommended.

Thanks

[marvin]

Main page only.

Marvin

[Ajeh]

What happens if you fix the call to:
http://www.sourceforherbs.com/images/cot_black.gif

to know when and when not to use secure?

[marvin]

How do I "fix the call"? please.