Multiple Issues - help please? (SSL problems, IH issue, etc)

**doodlebee** · 31 Aug 2007, 03:33 PM

1) In IE, when I go to any of the secure areas (log in, shopping cart, any account pages), I get a message that says "This page contains both secure and nonsecure items. Do you want to display the nonsecure items?"

I've found other threads that say stuff about hard-coded URLs, and I've removed them all (including in the stylesheets), but the message is still appearing.

2) In relationship to the first question, eventually, I *will* have to put in two hard-coded links in my html_header.php file, as they lead away from the site and to another one. How can I format hard-coded links so they will no display the above message?

3) In any browser, if I'm in any of the secure areas (accounts, logins, etc.), if I try to click a link to go back to the store - i.e., move away from the secure area - I get a 403 Forbidden, and the URL is incorrect. Now, I'm not sure if this is because the site is currently in development, and is on a test server, but what happens is, the URL for the shop is similar to "http://www.store.com/index.php", but the secure areas URL is "https://servername.hostingprovider.com/~accountname/index.php". I believe that, when the site goes live, the secure URL will change to "https://www.storename.com" - but I'll have to check. Could this be the reason I'm getting a 403 forbidden page when trying to move back and forth from the secure to non-secure areas? If so, when the site goes live and is changed, will this resolve itself? If not, what else could it be, and how would I resolve the issue?

4) I'm using the Image Handler plugin. On all browsers - save Firefox - the popup-image display on hover status is non-functional. Only Firefox is showing it. On all other browsers, I get a javascript error - I haven't touched the code at all. Would anyone know the reason for this?

If anyone has any ideas on any of these, I'd really appreciate it.

Thanks! :)

**Ajeh** · 31 Aug 2007, 04:08 PM

Sounds like you have hard coded images or additions like google ads etc. ...

Have you an URL to your site that we could perhaps peek at to discover what is causing this issue?

**doodlebee** · 31 Aug 2007, 04:54 PM

Originally Posted by Ajeh

Sounds like you have hard coded images or additions like google ads etc. ...

Actually, no. As mentioned in other threads, the hard-coding is what causes the issue. However before I posted, I went through and made sure *everything* (including in the stylesheets) had relative links. The two links (the ones that eventually *must* be links to another site - so I need to figure out how to hard-code without throwing out this issue) are now replaced with hashmarks.

There are absolutely no ads whatsoever on this site. Nothing more than the zencart and the products I've placed inside them.

I can't provide a link to the site directly because it's still under development and I'm in an NDA - so I can't even tell you who it is ;) However, even if you could link to the site you still wouldn't see the code because it's PHP and not viewable through the browser (of course you knew that, though ;)) So I will provide some links to my code in text format. Wait...unless you'd rather see it here. I can't remember which way you all prefer...a link to the outside, or if I just put it here so other can see and learn from it.

I'll post part of it here - then if it's too much I'll put it in a link. SO we'll start with the html_header.php file:

Code:

<?php
/**
 * Common Template
 *
 * outputs the html header. i,e, everything that comes before the \</head\> tag <br />
 * 
 * @package templateSystem
 * @copyright Copyright 2003-2006 Zen Cart Development Team
 * @copyright Portions Copyright 2003 osCommerce
 * @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
 * @version $Id: html_header.php 4368 2006-09-03 19:31:00Z drbyte $
 */
/**
 * load the module for generating page meta-tags
 */
require(DIR_WS_MODULES . zen_get_module_directory('meta_tags.php'));
/**
 * output main page HEAD tag and related headers/meta-tags, etc
 */
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" <?php echo HTML_PARAMS; ?>>
<head>
<title><?php echo META_TAG_TITLE; ?></title>
<meta http-equiv="Content-Type" content="text/html; charset=<?php echo CHARSET; ?>" />
<meta name="keywords" content="<?php echo META_TAG_KEYWORDS; ?>" />
<meta name="description" content="<?php echo META_TAG_DESCRIPTION; ?>" />
<meta http-equiv="imagetoolbar" content="no" />
<meta name="generator" content="shopping cart program by Zen Cart&trade;, http://www.zen-cart.com eCommerce" />
<?php if (defined('ROBOTS_PAGES_TO_SKIP') && in_array($current_page_base,explode(",",constant('ROBOTS_PAGES_TO_SKIP'))) || $current_page_base=='down_for_maintenance') { ?>
<meta name="robots" content="noindex, nofollow" />
<?php } ?>
<?php if (defined('FAVICON')) { ?>
<link rel="icon" href="<?php echo FAVICON; ?>" type="image/x-icon" />
<link rel="shortcut icon" href="<?php echo FAVICON; ?>" type="image/x-icon" />
<?php } //endif FAVICON ?>

<base href="<?php echo (($request_type == 'SSL') ? HTTPS_SERVER . DIR_WS_HTTPS_CATALOG : HTTP_SERVER . DIR_WS_CATALOG ); ?>" />

<?php

/**
 * load all template-specific stylesheets, named like "style*.css", alphabetically
 */
  $directory_array = $template->get_template_part($template->get_template_dir('.css',DIR_WS_TEMPLATE, $current_page_base,'css'), '/^style/', '.css');
  while(list ($key, $value) = each($directory_array)) {
    //echo '<link rel="stylesheet" type="text/css" href="' . $template->get_template_dir('.css',DIR_WS_TEMPLATE, $current_page_base,'css') . '/' . $value . '" />'."\n";
    echo '<link rel="stylesheet" type="text/css" href="' . $template->get_template_dir('.css',DIR_WS_TEMPLATE, $current_page_base,'css') . '/' . $value . '" />'."\n";
  }
/**
 * load stylesheets on a per-page/per-language/per-product/per-manufacturer/per-category basis. Concept by Juxi Zoza.
 */
  $manufacturers_id = (isset($_GET['manufacturers_id'])) ? $_GET['manufacturers_id'] : '';
  $tmp_products_id = (isset($_GET['products_id'])) ? (int)$_GET['products_id'] : '';
  $tmp_pagename = ($this_is_home_page) ? 'index_home' : $current_page_base;
  $sheets_array = array('/' . $_SESSION['language'] . '_stylesheet', 
                        '/' . $tmp_pagename, 
                        '/' . $_SESSION['language'] . '_' . $tmp_pagename, 
                        '/c_' . $cPath,
                        '/' . $_SESSION['language'] . '_c_' . $cPath,
                        '/m_' . $manufacturers_id,
                        '/' . $_SESSION['language'] . '_m_' . (int)$manufacturers_id, 
                        '/p_' . $tmp_products_id,
                        '/' . $_SESSION['language'] . '_p_' . $tmp_products_id
                        );
  while(list ($key, $value) = each($sheets_array)) {
    //echo "<!--looking for: $value-->\n";
    $perpagefile = $template->get_template_dir('.css', DIR_WS_TEMPLATE, $current_page_base, 'css') . $value . '.css';
    //if (file_exists($perpagefile)) echo '<link rel="stylesheet" type="text/css" href="' . $perpagefile .'" />'."\n";
        if (file_exists($perpagefile)) echo '<link rel="stylesheet" type="text/css" href="' . $perpagefile .'" />'."\n";
  }

/**
 * load printer-friendly stylesheets -- named like "print*.css", alphabetically
 */
  $directory_array = $template->get_template_part($template->get_template_dir('.css',DIR_WS_TEMPLATE, $current_page_base,'css'), '/^print/', '.css');
  sort($directory_array);
  while(list ($key, $value) = each($directory_array)) {
    echo '<link rel="stylesheet" type="text/css" media="print" href="' . $template->get_template_dir('.css',DIR_WS_TEMPLATE, $current_page_base,'css') . '/' . $value . '" />'."\n";
  }

/**
 * load all site-wide jscript_*.js files from includes/templates/YOURTEMPLATE/jscript, alphabetically
 */
  $directory_array = $template->get_template_part($template->get_template_dir('.js',DIR_WS_TEMPLATE, $current_page_base,'jscript'), '/^jscript_/', '.js');
  while(list ($key, $value) = each($directory_array)) {
    echo '<script type="text/javascript" src="' .  $template->get_template_dir('.js',DIR_WS_TEMPLATE, $current_page_base,'jscript') . '/' . $value . '"></script>'."\n";
  }

/**
 * load all page-specific jscript_*.js files from includes/modules/pages/PAGENAME, alphabetically
 */
  $directory_array = $template->get_template_part($page_directory, '/^jscript_/', '.js');
  while(list ($key, $value) = each($directory_array)) {
    echo '<script type="text/javascript" src="' . $page_directory . '/' . $value . '"></script>' . "\n";
  }

/**
 * load all site-wide jscript_*.php files from includes/templates/YOURTEMPLATE/jscript, alphabetically
 */
  $directory_array = $template->get_template_part($template->get_template_dir('.php',DIR_WS_TEMPLATE, $current_page_base,'jscript'), '/^jscript_/', '.php');
  while(list ($key, $value) = each($directory_array)) {
/**
 * include content from all site-wide jscript_*.php files from includes/templates/YOURTEMPLATE/jscript, alphabetically.
 * These .PHP files can be manipulated by PHP when they're called, and are copied in-full to the browser page
 */
    require($template->get_template_dir('.php',DIR_WS_TEMPLATE, $current_page_base,'jscript') . '/' . $value); echo "\n";
  }
/**
 * include content from all page-specific jscript_*.php files from includes/modules/pages/PAGENAME, alphabetically.
 */
  $directory_array = $template->get_template_part($page_directory, '/^jscript_/');
  while(list ($key, $value) = each($directory_array)) {
/**
 * include content from all page-specific jscript_*.php files from includes/modules/pages/PAGENAME, alphabetically.
 * These .PHP files can be manipulated by PHP when they're called, and are copied in-full to the browser page
 */
    require($page_directory . '/' . $value); echo "\n";
      }

if ($tmp_products_id != '') {}
else { echo '<script type="text/javascript" src="' . HTTP_SERVER . DIR_WS_CATALOG . 'jscript/imagehover.js"></script>'. "\n";}


// DEBUG: echo '<!-- I SEE cat: ' . $current_category_id . ' || vs cpath: ' . $cPath . ' || product id: ' . $tmp_products_id . ' || page: ' . $current_page . ' || template: ' . $current_template . ' || main = ' . ($this_is_home_page ? 'YES' : 'NO') . ' -->';
?>

<!--[if IE]>
<link rel="stylesheet" href="<?php if($this_is_home_page){ echo DIR_WS_TEMPLATE . 'css/ie-index.css'; } else { echo DIR_WS_TEMPLATE . 'css/ie.css';}?>" />
<![endif]-->

<!--[if lte IE 6]>
<link rel="stylesheet" href="<?php if($this_is_home_page){  } else { echo DIR_WS_TEMPLATE . 'css/ie6.css';}?>" />
<![endif]-->
</head>
<?php // NOTE: Blank line following is intended: ?>

...and now the tpl_header.php file:

Code:

<?php // Display all header alerts via messageStack:
  if ($messageStack->size('header') > 0) {
    echo $messageStack->output('header');
  }
  if (isset($_GET['error_message']) && zen_not_null($_GET['error_message'])) {
  echo htmlspecialchars(urldecode($_GET['error_message']));
  }
  if (isset($_GET['info_message']) && zen_not_null($_GET['info_message'])) {
   echo htmlspecialchars($_GET['info_message']);
} else {

}
?>
<?php
if (!isset($flag_disable_header) || !$flag_disable_header) {
?>
	<?php //echo '<a class="image" title="Welcome to Our shop." href="' . HTTP_SERVER . DIR_WS_CATALOG . '" tabindex="1">' . zen_image($template->get_template_dir(HEADER_LOGO_IMAGE, DIR_WS_TEMPLATE, $current_page_base,'images'). '/' . HEADER_LOGO_IMAGE, HEADER_ALT_TEXT) . '</a>'; ?>
	<?php echo '<a class="image" title="Welcome to our Shop." href="' . HTTP_SERVER . DIR_WS_CATALOG . '" tabindex="1"><img src="' . HTTP_SERVER . '/' . DIR_WS_TEMPLATE . 'images/' . HEADER_LOGO_IMAGE . '" alt="' . HEADER_ALT_TEXT . '" /></a>'; ?>

  <div id="inner" class="clearfix">

    <div class="top left">

	<a title="Visit to find yarn by weight." href="<?php echo DIR_WS_HTTPS_CATALOG ?>index.php?&amp;cPath=1">yarn by gauge</a>
	<a title="Visit to find yarn by fiber." href="<?php echo DIR_WS_HTTPS_CATALOG ?>index.php?&amp;cPath=2">yarn by fiber</a>
	<a title="Visit to find by color." href="<?php echo DIR_WS_HTTPS_CATALOG ?>index.php?&amp;cPath=3">yarn by color</a>
	<a title="Browse through all of our available patterns." href="<?php echo DIR_WS_HTTPS_CATALOG ?>index.php?&amp;cPath=4">patterns</a>
	<br />
	<a title="Find yarn that is a solid color." href="<?php echo DIR_WS_HTTPS_CATALOG ?>index.php?&amp;cPath=12">solid color</a>
	<a title="Find yarn that has slight variations in color." href="<?php echo DIR_WS_HTTPS_CATALOG ?>index.php?&amp;cPath=11">somewhat solid</a>
	<a title="Find fun, multicolored yarn." href="<?php echo DIR_WS_HTTPS_CATALOG ?>index.php?&amp;cPath=10">multicolor</a>

    </div>

    <div class="top middle">

	<a title="Go back to the home page." href="<?php echo (($request_type == 'SSL') ? HTTPS_SERVER . DIR_WS_HTTPS_CATALOG : HTTP_SERVER . DIR_WS_CATALOG ); ?>">home</a>
<?php if (EZPAGES_STATUS_HEADER == '1' or (EZPAGES_STATUS_HEADER == '2' and (strstr(EXCLUDE_ADMIN_IP_FOR_MAINTENANCE, $_SERVER['REMOTE_ADDR'])))) { ?>
<?php require($template->get_template_dir('tpl_ezpages_bar_header.php',DIR_WS_TEMPLATE, $current_page_base,'templates'). '/tpl_ezpages_bar_header.php'); ?>
<?php } ?>
	<a title="Subscribe to the Newsletter." href="#">newsletter</a>
	<a title="Visit our blog!" href="#">blog</a>
	<a title="View our gallery." href="#">gallery</a>

    </div>

    <div class="top right">
	<?php if ($_SESSION['customer_id']) { ?>
		<a href="<?php echo zen_href_link(FILENAME_CONTACT_US, '', 'SSL'); ?>">contact</a>
	<a href="<?php echo zen_href_link(FILENAME_ACCOUNT, '', 'SSL'); ?>"><?php echo HEADER_TITLE_MY_ACCOUNT; ?></a>
	<a href="<?php echo zen_href_link(FILENAME_LOGOFF, '', 'SSL'); ?>"><?php echo HEADER_TITLE_LOGOFF; ?></a>
	<?php } else { if (STORE_STATUS == '0') { ?>
	<a href="<?php echo zen_href_link(FILENAME_LOGIN, '', 'SSL'); ?>"><?php echo HEADER_TITLE_LOGIN; ?></a>
	<?php } } if ($_SESSION['cart']->count_contents() != 0) { ?>
	<a href="<?php echo zen_href_link(FILENAME_SHOPPING_CART, '', 'NONSSL'); ?>"><?php echo HEADER_TITLE_CART_CONTENTS; ?></a>
	<a href="<?php echo zen_href_link(FILENAME_CHECKOUT_SHIPPING, '', 'SSL'); ?>"><?php echo HEADER_TITLE_CHECKOUT; ?></a>
	<?php }?>
    </div>

  </div> <!-- /inner -->

</div> <!-- /header -->
<?php } ?>

I'm positive that, if there's errors in the code, it's in one of these two files. (hte "blog" and "gallery" are what will be the two links that need hard-coded to an outside URL eventually.) Do you (or anyone) see anything weird there?