-
SSL secure and non-secure items
I cannot track down my references to non-secure images or links on this site.
http://www.metrofantasies.com/index.php
When I go to login or checkout, I get the ugly "secure and non-secure items" alert.
All images seem to be pointing to relative positions. Does anyone see what I'm missing?
Thanks,
Angel
-
Re: SSL secure and non-secure items
Oh, I should also mention that I have a symbolic link for the http:// and https://, so everything is in one folder on the server.
Also, the warning does not come up when I access the admin.
Angel
-
Re: SSL secure and non-secure items
I'm not seeing the alert...
-
Re: SSL secure and non-secure items
I am getting the same problem at checkout...
Can someone look at
www.nothingbutcostumes.com
Take a look at any product and click checkout.
-
Re: SSL secure and non-secure items
Milo-
Your problems are caused by a domain name mismatch - your site is running with the WWW and the Certificate is missing those ...
-
Re: SSL secure and non-secure items
Can you try it again now.. I am getting the same problem in IE but not firefox.
I switched the config to say https://nothing... Instead of www
-
Re: SSL secure and non-secure items
k- still getting the "unknown authority etc" - possibly server misconfiguration ...
-
Re: SSL secure and non-secure items
Would that be something I did trying to generate the crt?
Or something my host did?
-
Re: SSL secure and non-secure items
Hello I am getting the same message;
"This page contains both secure and nonsecure items.
Do you want to display the nonsecure items?"
And only appears in Internet Explorer.
The site is http://www.jewelstore.com.au
Could someone explain to me exactly what causes this message? Is it mismatched domain or from hard linked images?
-
Re: SSL secure and non-secure items
Quote:
Originally Posted by
Access
Hello I am getting the same message;
"This page contains both secure and nonsecure items.
Do you want to display the nonsecure items?"
And only appears in Internet Explorer.
The site is
http://www.jewelstore.com.au
Could someone explain to me exactly what causes this message? Is it mismatched domain or from hard linked images?
"where" are you getting that message ? I don't see it on your login page.
It's typically caused by having hardcoded http: links to images instead of relative links or https: links.
This also often happens by installing tracking code to a site by blindly copy-and-pasting what's supplied by a tracking company. The links need to be converted to work in secure mode.
-
Re: SSL secure and non-secure items
Quote:
Originally Posted by
DrByte
"where" are you getting that message ? I don't see it on your login page.
It's typically caused by having hardcoded http: links to images instead of relative links or https: links.
This also often happens by installing tracking code to a site by blindly copy-and-pasting what's supplied by a tracking company. The links need to be converted to work in secure mode.
https://www.jewelstore.com.au/index.php?main_page=index
Hello thats an example of a page that does it, some poor development has gone onto this project from multiple parties so I imagine their may be many hard links. Will pool through it.
-
Re: SSL secure and non-secure items
drByte is right that there must be a hard-coded link somewhere.
but it's not in your php or javascript files ... it's in your stylesheet's footer code
in your stylesheet.css i see:
Code:
.footer_c1 { width:567px; background:#FFFFFF url(http://www.diamondexchange.com.au/starlight/img/footer.png) left bottom;}
.footer_c2 { width:0px;}
.footer_c3 { width:207px; background:#FFFFFF url(http://www.diamondexchange.com.au/starlight/img/footer.png) right bottom;}
those direct links will most likely be what's causing your problem
-
Re: SSL secure and non-secure items
Quote:
Originally Posted by
DrByte
"where" are you getting that message ? I don't see it on your login page.
It's typically caused by having hardcoded http: links to images instead of relative links or https: links.
This also often happens by installing tracking code to a site by blindly copy-and-pasting what's supplied by a tracking company. The links need to be converted to work in secure mode.
How do you convert the links?
-
Re: SSL secure and non-secure items
Quote:
Originally Posted by
BekahRuth
How do you convert the links?
You could start by changing them to https: instead of http:
-
Re: SSL secure and non-secure items
Quote:
Originally Posted by
chuck
drByte is right that there must be a hard-coded link somewhere.
but it's not in your php or javascript files ... it's in your stylesheet's footer code
in your stylesheet.css i see:
Code:
.footer_c1 { width:567px; background:#FFFFFF url(http://www.diamondexchange.com.au/starlight/img/footer.png) left bottom;}
.footer_c2 { width:0px;}
.footer_c3 { width:207px; background:#FFFFFF url(http://www.diamondexchange.com.au/starlight/img/footer.png) right bottom;}
those direct links will most likely be what's causing your problem
Wow thankyou so much! Your a gentlemen.
-
Re: SSL secure and non-secure items
Hi,
I am having similar warning with secure and nonsecure items during checkout. How do I find out what is causing it?
-
Re: SSL secure and non-secure items
Go to your checkout page where you get those warnings.
Go to your browser menu ... likely under Edit or View, and choose View Source.
Copy the source to your clipboard, and paste it here for review.
-
Re: SSL secure and non-secure items
Hi DrByte,
Thanks for your response. I realized that during checkout there are links to myspace and google translate (which I would like to keep). Could this be what is causing the problem? If it is, is it possible to disable those links during checkout? What do you suggest?
Thank you.
-
Re: SSL secure and non-secure items
Quote:
Originally Posted by
dealbyethan.com
I realized that during checkout there are links to myspace and google translate (which I would like to keep). Could this be what is causing the problem? If it is, is it possible to disable those links during checkout? What do you suggest?
That is most likely your problem. Yes, of course, disable them during checkout !
-
Re: SSL secure and non-secure items
Hi DrByte,
How do I disable those links during checkout? I know which file these links are located. But I don't know how to make sure they are displayed when someone is just browsing and turned off when they checkout? Thank you.
-
Re: SSL secure and non-secure items
Quote:
Originally Posted by
dealbyethan.com
How do I disable those links during checkout? I know which file these links are located. But I don't know how to make sure they are displayed when someone is just browsing and turned off when they checkout? Thank you.
Which file are they in?
Please post the code.
-
Re: SSL secure and non-secure items
Hi DrByte,
They are in the following file:
/public_html/includes/templates/ZC03C8447TM/common/tpl_main_page.php
Thanks.
-
Re: SSL secure and non-secure items
Quote:
Originally Posted by
DrByte
Which file are they in?
Please post the code.
Quote:
Originally Posted by
dealbyethan.com
They are in the following file:
/public_html/includes/templates/ZC03C8447TM/common/tpl_main_page.php
Thanks for sharing the filename.
Can you also share the code that's *in* the file?
-
Re: SSL secure and non-secure items
Hi DrByte,
The codes are as follows.
Link to MySpace
<a href="http://www.myspace.com/dealbyethan" target="_blank">MySpace</a>
Link to Google Translation
<a href="http://translate.google.com/translate?u=http%3A%2F%2Fwww.dealbyethan.com&langpair=en%7Cfr&hl=en&safe=off&ie= UTF-8&oe=UTF-8&prev=%2Flanguage_tools" border="0"><img src="/pictures/france.gif" border="0"></a>
Thank you.
-
Re: SSL secure and non-secure items
Okay, rather than giving you *exactly* what to do, I'll have to give you the concept and hope you can do it yourself.
Put this before the part you don't want to load on SSL pages:
Code:
<?php if ($request_type == 'NONSSL') { ?>
and put this after it:
-
Re: SSL secure and non-secure items
Hi DrByte,
After some testing, I found out what was really giving me the problem. It wasn't the external links to myspace nor to google translation. It was actually the Live Help (by Help Center Live). Any idea why this is a nonsecure item? For your information, this separate module is not external but has been installed under my root. There isn't 'http' in the link code either.
Thank you so much for your help. Much appreciated.
-
Re: SSL secure and non-secure items
It's this:
Code:
<embed src="http://lads.myspace.com/photoshow/slideshow.swf" type="application/x-shockwave-flash" quality="high" scale="noscale" wmode="transparent" flashvars="userID=108957088&bgColor=10079487&bgColor2=10079487&transitionSpeed=4&transitionStyle=b&showCaptions=1&albumID=1013221" width="500" height="250" name="slider" align="middle"/>
-
Re: SSL secure and non-secure items
Hi DrByte,
I know the homepage photoshow is external code. But during checkout, the photoshow does not appear so I don't think it is the cause of the nonsecure alert.
The Live Help is not related to the photoshow code. The only thing I disable during checkout is this Live Help using the code you provided. This did get rid of the nonsecure alert. I just couldn't understand why this is the cause as it is not external but installed under my root.
Thanks.
-
Re: SSL secure and non-secure items
Quote:
Originally Posted by
DrByte
Okay, rather than giving you *exactly* what to do, I'll have to give you the concept and hope you can do it yourself.
Put this before the part you don't want to load on SSL pages:
Code:
<?php if ($request_type == 'NONSSL') { ?>
and put this after it:
I want to use the above code in my tpl_blank_sidebox.php.
This is in my tpl_blank_sidebox.php:
Code:
<?php
//
// Blank Sidebox Mod
// includes/templates/templates_default/sideboxes/tpl_blank_sidebox.php
//
// --------------------------------------------------
// http://www.MommaMuse.com mod Zen-Cart - by Judi Cox
// --------------------------------------------------
// zen-cart Open Source E-commerce
// Copyright (c) 2003-2006 The zen-cart developers
// http://www.zen-cart.com/index.php
// Portions Copyright (c) 2003 osCommerce
// --------------------------------------------------
// This source file is subject to version 2.0 of the GPL license,
// that is bundled with this package in the file LICENSE, and is
// available through the world-wide-web at the following url:
// http://www.zen-cart.com/license/2_0.txt.
// If you did not receive a copy of the zen-cart license and are unable
// to obtain it through the world-wide-web, please send a note to
// license AT zen-cart DOT com so we can mail you a copy immediately.
// --------------------------------------------------
//
// $Id: tpl_blank_sidebox.php,v 1.0 6/24/2006
// Original modification by Carter Harris charris AT technettn DOT net based on the tpl_featured.php file
// Additionally modified by Judi Cox http://www.mommamuse.com
$content = '';
$content .= '<div id="' . str_replace('_', '-', $box_id . 'Content') . '" class="sideboxEmail">';
$content .= '
<!-- EDIT BELOW THIS LINE -->
<table align="center">
<tr>
<td align="center">
<a href="<A href="http://www.tehome.net/shop/index.php?main_page=wordpress"><img">http://www.tehome.net/shop/index.php?main_page=wordpress"><img src="<A href="http://tehome.net/shop/images/blog_sidebar.jpg"</a">http://tehome.net/shop/images/blog_sidebar.jpg"</a>
</td>
<tr>
<tr>
<td align="center">
</td>
<tr>
</table>
<!-- EDIT ABOVE THIS LINE -->
';
$content .= '</div>';
?>
Where do I place the code to turn off this sidebox when using ssl?
-
Re: SSL secure and non-secure items
Hi All,
I am also getting the same alert. I've tried changing hard links to https but it doesn't seem to work. Also if I change all my links to that won't it make my page load slower? I can't figure out which file is affecting my sll. My site is http://www.beautyxpress.com.au If you could point my in the right direction it would be much appreciated. Thanks all!
-
Re: SSL secure and non-secure items
We need the URL to the Zen Cart -
-
Re: SSL secure and non-secure items
Oops sorry about that I forgot I haven't redirected it yet..anyways here it is. Thanks again.
http://www.beautyxpress.com.au/store
-
Re: SSL secure and non-secure items
Hi All!
I'm going live today!! So excited but was hoping to have this SSL thing sorted so it doesn't bug my customers. Please help if you can. Thanks.
-
Re: SSL secure and non-secure items
It appears that your define_main_page.php contains numerous hard-coded HTTP links to images, instead of leaving them as relative links:
Code:
<img src="http://www.beautyxpress.com.au/store/includes/templates/theme052/images/grand_opening.jpg">
Beauty Xpress is finally here and ready to share the savings with you! <b>Everything is 10-15% Off!</b> If you buy over $75 worth of products, you also receive free shipping! As we are already committed to low pricing this offer only lasts for two weeks. So hurry and buy big and save!<br /><br />
Also, if you buy any Mirenésse products this month you will receive free Mirenésse gifts with your order (available until stocks lasts).<br /><br />
Come join in the festivities! Have a look around and see if there's something that takes your fancy. Remember if you can't afford it right now (or you would rather someone else bought it for you), take advantage of our wishlists. To find out more <a href="http://www.beautyxpress.com.au/store/index.php?main_page=page_3#WhatisawishlistandhowdoIuseit">click here</a>.<br /><br />
We hope you enjoy savings we offer you in October. If you have any questions, please don't hesitate to contact the <a href="mailto:[email protected]">customer service</a> team.<br /><br />
<table width="360" border="0">
<tr>
<td colspan="2"><div align="center"><img src="http://www.beautyxpress.com.au/store/includes/templates/theme052/images/banner_top.jpg"></div></td>
</tr>
<tr>
<td>
<div align="left">
<a href="http://www.beautyxpress.com.au/store/index.php?main_page=products_all"><img src="http://www.beautyxpress.com.au/store/includes/templates/theme052/images/banner_sideleft.jpg" alt="Opening Sale"> </a> </div> </td>
<td><div align="right">
<a href="http://www.beautyxpress.com.au/store/index.php?main_page=index&cPath=28_43_126"><img src="http://www.beautyxpress.com.au/store/includes/templates/theme052/images/banner_sideright.jpg" alt="Free Mirenésse Gifts"></div></td>
</tr>
</table>
<br />
<img src="http://www.beautyxpress.com.au/store/includes/templates/theme052/images/staff_picks.jpg">
Our staff have tried and tested products to take out all the guesswork of your purchasing. To read
Additionally, you have two instances where you're calling javascript files using direct http: links:
Code:
<script src="http://www.beautyxpress.com.au/store/search_category.js" language="JavaScript" type="text/javascript"></script>
Code:
<script src="http://www.beautyxpress.com.au/store/search_skin_type.js" language="JavaScript" type="text/javascript"></script>
-
Re: SSL secure and non-secure items
Thanks DrByte, I changed the things that you recommended to change but I'm still having problems. My guess is a have a lot of these hard coded links all over the website. Is there any particular place I should look? Also, how do you write links that are not hard coded?
-
Re: SSL secure and non-secure items
Ok, so I've gone through every hard link I can find and it is still showing the error. I'm running out of ideas on how to fix this. If anyone has a spare couple of minutes please help.
-
Re: SSL secure and non-secure items
It's all fixed! After changing every single hard coded link I could find (and there was quite a few) my SSL message was still appearing. I ended up changing some code on my flash header and now it all works. Thanks for your help guys I really appreciate it!! :clap:
-
Re: SSL secure and non-secure items
Hi there
I'm having the same problem (www.giftsfromwales.com).
I'm sure I had this problem before when I originally installed zencart and used a flash logo but I'm going back a few a years! I checked the code for the flash logo and it doesn't appear to have any direct references:
HTML Code:
<!--bof-branding display-->
<div id="logoWrapper">
<div id="logo"><object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"
codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,0,0"
width="798" height="100">
<param name="movie" value="../includes/templates/Gifts%20From%20Wales/images/logo.swf">
<param name="quality" value="high">
<param name="LOOP" value="false">
<param name="menu" value="false">
<embed src="../includes/templates/Gifts%20From%20Wales/images/logo.swf"
width="800" height="100"
loop="false" quality="high"
pluginspage="http://www.macromedia.com/go/getflashplayer"
type="application/x-shockwave-flash" menu="false">
</embed></object></div>
Can anybody help me?
Thanks
Steve
-
Re: SSL secure and non-secure items
Quote:
Originally Posted by
copels
I checked the code for the flash logo and it doesn't appear to have any direct references
Sure it does:
Code:
codebase="http://download.macromedia.com/pu...
and
Code:
pluginspage="http://www.macromedia.com/go/getflashplayer"
-
Re: SSL secure and non-secure items
Thanks Dr Byte - any idea what I need to change to get this to work? Should I just take them out?
Thanks
Steve
-
Re: SSL secure and non-secure items
Think I solved it by using https rather than http.
Steve
-
Re: SSL secure and non-secure items
I've just installed SSL and have made sure I have removed all hardcoded links within my site and I'm still getting the secure, no-secure popup in IE7. HELP! I don't know what else could be causing it. I have a couple external links but they shouldn't be causing it? Please have a look if you have time. Thanks
https://www.modamuse.com/index.php?main_page=
-
Re: SSL secure and non-secure items
I've had the "nonsecure items" problem in IE too. When I click "no" to not display the nonsecure items, my background is the only thing that does not show up. I looked inside my stylesheet.css and the background is called out the same as the tileback images. Can anyone tell me how I can fix my background image so it doesn't give IE a heart attack every time you go to a https page on my site. Any help would be appreciated. my site is http:www.mainlinetrains.com
Mark
-
Re: SSL secure and non-secure items
I'm getting this error because of a hardcoded link to Comodo's trust logo image. I guess changing the "http" to "https" would fix it, but is there a way to make it a relative link instead? The image is in the zen image directory (which I think is referenced by DIR_WS_IMAGES?) but I don't know how to format the link in "Zen-ese".
-
Re: SSL secure and non-secure items
The banner manager has a feature specifically to allow banners to display as SSL. I am having the same non secure items error in IE and a firefox lock with the red bar across it indicating same issue.
The only hard coded links to images I changed from http to https and have same problems.
www.reallifespan.com
Ideas anyone ? :huh:
-
Re: SSL secure and non-secure items
I deleted banners and the problem went away. It appears that the SSL option for banners is of no use when you use banner code that is sent from outside as from CJ.com. I am going to contact them to see if they have options to fix that.
Have a great day!
Shop Here, I need the money! http://www.florida-saver.com/savenow.php
-
Re: SSL secure and non-secure items
The option in the Banners Manager for SSL is for you to say if the banner is capable of running on secure pages ...
It does not change the banner so that it can, it just removes the banner from the list of banners displayed when on SSL pages if you say that the banner cannot be run on secure pages ...
-
Re: SSL secure and non-secure items
Hi,
I've narrowed the problem down to the google checkout logo, which i've placed in a banner:
HTML Code:
<link rel="stylesheet" href="https://checkout.google.com/seller/accept/s.css" type="text/css" media="screen" /> <script type="text/javascript" src="https://checkout.google.com/seller/accept/j-en_GB.js"></script> <script type="text/javascript">showMark(3);</script> <noscript>
img src="https://checkout.google.com/seller/accept/images/sc.gif" width="72" height="73" alt="Google Checkout Acceptance Mark" /></noscript>
Is there anything obvious in this code that may be causing the 'secure non secure items' error?
-
Re: SSL secure and non-secure items
Whenever an SSL connection is used and there are links off-site, there will always be a security warning -- because it goes against SSL security to use links to a site other than your own.
Sometimes you can "trick" SSL though, by putting your code elsewhere on your site and using (for example) Javascript to pull that code into your page.
-
Re: SSL secure and non-secure items
Quote:
Originally Posted by
Website Rob
Whenever an SSL connection is used and there are links off-site, there will always be a security warning -- because it goes against SSL security to use links to a site other than your own.
Sometimes you can "trick" SSL though, by putting your code elsewhere on your site and using (for example) Javascript to pull that code into your page.
Thanks for the reply. However, I have the paypal logo and godaddy seal which both reference external links but do not cause this message to appear.
The code for the paypal logo is as follows:
HTML Code:
<!-- PayPal Logo --><table border="0" cellpadding="10" cellspacing="0" align="center"><tr><td align="center"></td></tr>
<tr><td align="center"><a href="#" onclick="javascript:window.open('https://www.paypal.com/uk/cgi-bin/webscr?cmd=xpt/cps/popup/OLCWhatIsPayPal-outside','olcwhatispaypal','toolbar=no, location=no, directories=no, status=no, menubar=no, scrollbars=yes, resizable=yes, width=400, height=350');"><img src="[URL]https://www.paypal.com/en_GB/GB/i/logo/PayPal_mark_60x38.gif[/URL]" border="0" alt="Acceptance Mark"></a></td></tr></table><!-- PayPal Logo -->
-
Re: SSL secure and non-secure items
I must apologize as I was not quite awake it seems, when making my last post. Did not see the 'https' connection to Google links. Usually an 'https' connection to an off-site URL is another way of avoiding SSL security msgs.
I do believe the problem is with this:
<script type="text/javascript" src="https://checkout.google.com/seller/accept/j-en_GB.js">
Although there is an 'https' connection it is used for a 'javascript' file which is not using an 'https' connection for what it is doing.
Hard to say though, if your Google links are the problem without being able to see your page code.
-
Re: SSL secure and non-secure items
I just found this mod and it was very helpful to get rid of my SSL secure/non-secure problems. Just some easy editing of this sidebox is all you need:
http://www.zen-cart.com/index.php?ma...roducts_id=649
-
Re: SSL secure and non-secure items
You were quite right - after digging around other sites which have the google acceptance mark i saw the file they were linking to was 'j.js' as opposed to 'j-en_GB.js' and this fixed my problem.
Many thanks.
-
Re: SSL secure and non-secure items
Quote:
Originally Posted by
Coop1979
Thanks Coop, but unfortunately, this mod simply doesn't display the non-secure items on a secure page - this can also be achieved by using a banner box with the option 'show on ssl pages' switched off.
-
Re: SSL secure and non-secure items
I am having the same problem on my site. I have scoured my code for external links, but can't find any. I could really use the help of a guru!
HTML Code:
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en">
<head>
<title>Step 1 of 3 - Shipping Information : Yes! Online Store</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<meta name="keywords" content="Back Issues Other Products Subscribe Donate Give Gifts Pay Invoice Renew ecommerce, open source, shop, online shopping Step 1 of 3 - Shipping Information" />
<meta name="description" content="Yes! Online Store : Step 1 of 3 - Shipping Information - Back Issues Other Products Subscribe Donate Give Gifts Pay Invoice Renew ecommerce, open source, shop, online shopping" />
<meta http-equiv="imagetoolbar" content="no" />
<meta name="author" content="The Zen Cart™ Team and others" />
<meta name="generator" content="shopping cart program by Zen Cart™, [url]http://www.zen-cart.com[/url] eCommerce" />
<meta name="robots" content="noindex, nofollow" />
<base href="https://www2418.ssldomain.com/yesmagazine/ZenCart/" />
<link rel="stylesheet" type="text/css" href="includes/templates/yes/css/stylesheet.css" />
<link rel="stylesheet" type="text/css" href="includes/templates/yes/css/stylesheet_css_buttons.css" />
<link rel="stylesheet" type="text/css" media="print" href="includes/templates/yes/css/print_stylesheet.css" />
</head>
<body id="checkoutshippingBody">
<div id="mainWrapper">
<!--bof-header logo and navigation display-->
<div id ="yesHeaderWrapper">
<!-- bof Main header table -->
<table border="0" cellpadding="0" cellspacing="0" width="100%">
<tr>
<td>
<div id="logo"><a href="http://www.yesmagazine.org/ZenCart/"><img src="includes/templates/yes/images/storeheader.jpg" alt="Yes! Store" title=" Yes! Store " width="114" height="79" /></a></div>
</td>
<td width="100%" id="yesheaderRightColumn" >
<!-- bof Sub header table -->
<table border="0" cellpadding="0" cellspacing="0" width="100%" style="height: 54px">
<tr>
<td>
<div align="right">
<div id="navMain">
<ul class="forward">
<li><a href="http://www.yesmagazine.org/ZenCart/index.php?main_page=manage_subscription&zenid=gr398pscqi03avrbn11004es95"><img src="includes/templates/yes/images/mysubscription.jpg" alt="My Subscription" title=" My Subscription " width="110" height="10" /></a></li>
<li><a href="https://www2418.ssldomain.com/yesmagazine/ZenCart/index.php?main_page=logoff&zenid=gr398pscqi03avrbn11004es95"><img src="includes/templates/yes/images/logout.jpg" alt="Logout" title=" Logout " width="63" height="10" /></a></li>
<li><a href="https://www2418.ssldomain.com/yesmagazine/ZenCart/index.php?main_page=account&zenid=gr398pscqi03avrbn11004es95"><img src="includes/templates/yes/images/myaccount.jpg" alt="My Account" title=" My Account " width="83" height="10" /></a></li>
<li><a href="http://www.yesmagazine.org/ZenCart/index.php?main_page=shopping_cart&zenid=gr398pscqi03avrbn11004es95"><img src="includes/templates/yes/images/shoppingcart.jpg" alt="Shopping Cart" title=" Shopping Cart " width="104" height="10" /></a></li>
</div>
</div>
</td>
</tr>
<tr>
<td valign="bottom">
<!--bof-optional categories tabs navigation display-->
<div id="navCatTabsWrapper">
<div id="navCatTabs">
<ul>
<li><a class="category-top" href="http://www.yesmagazine.org/ZenCart/index.php?main_page=index&cPath=3&zenid=gr398pscqi03avrbn11004es95">Subscribe</a> </li>
<li><a class="category-top" href="http://www.yesmagazine.org/ZenCart/index.php?main_page=index&cPath=8&zenid=gr398pscqi03avrbn11004es95">Renew</a> </li>
<li><a class="category-top" href="http://www.yesmagazine.org/ZenCart/index.php?main_page=index&cPath=9&zenid=gr398pscqi03avrbn11004es95">Pay Invoice</a> </li>
<li><a class="category-top" href="http://www.yesmagazine.org/ZenCart/index.php?main_page=index&cPath=7&zenid=gr398pscqi03avrbn11004es95">Give Gifts</a> </li>
<li><a class="category-top" href="http://www.yesmagazine.org/ZenCart/index.php?main_page=index&cPath=1&zenid=gr398pscqi03avrbn11004es95">Back Issues</a> </li>
<li><a class="category-top" href="http://www.yesmagazine.org/ZenCart/index.php?main_page=index&cPath=2&zenid=gr398pscqi03avrbn11004es95">Other Products</a> </li>
<li><a class="category-top" href="http://www.yesmagazine.org/ZenCart/index.php?main_page=index&cPath=5&zenid=gr398pscqi03avrbn11004es95">Donate</a> </li>
</ul>
</div>
</div>
<!--eof-optional categories tabs navigation display-->
</td>
</tr>
</table>
<!-- eof Sub header table -->
</td>
</tr>
</table>
<!-- eof Main header table -->
<!--eof-branding display-->
<!--bof-header ezpage links-->
<!--eof-header ezpage links-->
</div>
<!--div style="width: 100%; border: 1px solid green">End of tpl_header.php</div-->
<table width="100%" border="0" cellspacing="0" cellpadding="0" id="contentMainWrapper" style="height: 350px;">
<tr>
<td valign="top">
<!-- bof breadcrumb -->
<!-- eof breadcrumb -->
<!-- bof upload alerts -->
<!-- eof upload alerts -->
<div class="centerColumn" id="checkoutShipping">
<form name="checkout_address" action="https://www2418.ssldomain.com/yesmagazine/ZenCart/index.php?main_page=checkout_shipping&zenid=gr398pscqi03avrbn11004es95" method="post"><input type="hidden" name="action" value="process" />
<h1 id="checkoutShippingHeading">Step 1 of 3 - Shipping Information</h1>
<p></p>
<div align="left">
<table width="50%" cellspacing="1" cellpadding="3" border="0">
<tr>
<td nowrap="nowrap" class="gray_th">
<img border="0" alt="" src="images/arrow.gif"/>
<b>SHIPPING ADDRESS</b>
</td>
</tr>
<tr>
<td class="gray_td">
<div id="checkoutShipto" class="back">
Kevin Audleman<br /> 7878 NE Yeomalt Point Dr<br /> Bainbridge Is, WA 98110-1971<br /> United States
</div>
<div class="buttonRow forward"><a href="https://www2418.ssldomain.com/yesmagazine/ZenCart/index.php?main_page=checkout_shipping_address&zenid=gr398pscqi03avrbn11004es95"><img src="includes/templates/template_default/buttons/english/small_edit.gif" alt="Edit" title=" Edit " width="40" height="16" /></a></div>
</td>
</tr>
</table>
<p>
</p>
<div id="checkoutShippingContentChoose" class="important"></div>
<!-- bof shipping options -->
<div align="left">
<table width="50%" cellspacing="1" cellpadding="3" border="0">
<tr>
<td nowrap="nowrap" class="gray_th">
<img border="0" alt="" src="images/arrow.gif"/>
<b>PRODUCT SHIPPING CHARGE</b>
</td>
</tr>
<tr>
<td class="gray_td">
<input type="radio" name="shipping" value="yesrates_yesrates" checked="checked" id="ship-yesrates-yesrates" /><label for="ship-yesrates-yesrates" class="checkboxLabel" >Flat Rate ($3) </label>
</td>
</tr>
</table>
</div>
<!-- eof shipping options -->
<!--
<fieldset class="shipping" id="comments">
<legend>Special Instructions or Comments About Your Order</legend>
<textarea name="comments" cols="45" rows="3"></textarea></fieldset>
-->
<p>
<input type="submit" value="Continue Checkout" class="checkout_button" />
</p>
</form>
</div>
</td>
</tr>
</table>
<!--bof-navigation display -->
<div id="navSuppWrapper">
<div id="navSupp">
<ul>
<li><a href="http://www.yesmagazine.org/ZenCart/">Home</a></li>
<li></li>
</ul>
</div>
</div>
<!--eof-navigation display -->
</div>
<!--bof- parse time display -->
<!--eof- parse time display -->
<p> </p>
</body></html>
-
Re: SSL secure and non-secure items
I should mention:
The funny thing is that the SSL was working fine until a few days ago when our hosting provider moved our site to a new IP address and new SSL address. I updated HTTPS_SERVER in config.php to the new value, which worked just fine. Could that have anything to do with it?
Also, the site can be found at http://www.yesmagazine.org/ZenCart
You can login with user id: [email protected] pw: 12345
-
Re: SSL secure and non-secure items
My problem seems to have resolved itself. It must have been something to do with the change in IP address for my site that got resolved over a few days.
Kevin
-
Re: SSL secure and non-secure items
Hello,
I am having the 'secure and nonsecure items' issue only in IE not Firefox or Safari and am really struggling to find out why.
My site is www.outdoorworld.org.uk
I have been checking through for "src=http://" links in the code as advised on the main zencart site but as far as I can see the code links are all relative (maybe Im missing something).
Any help would be much appreciated.
Scotty
-
Re: SSL secure and non-secure items
Hello,
I have found out that my problem is caused somehow by the "google analytics by andrew" mod that i had recently installed.
I removed the jscript folder in the includes/templates directory and the problem went away. Now I have to get analytics working some other way.
Scotty:smile:
-
Re: SSL secure and non-secure items
Quote:
Originally Posted by
scottydog
Hello,
I have found out that my problem is caused somehow by the "google analytics by andrew" mod that i had recently installed.
I removed the jscript folder in the includes/templates directory and the problem went away. Now I have to get analytics working some other way.
Scotty:smile:
I found the same problem. In particular, it's jscript_googleanalytics_outgoing.php that breaks the SSL. Anyone have a fix yet or am I going to have to figure this out on my own?
-
Re: SSL secure and non-secure items
Hi NHRADeuce,
The analytics mod that is causing the problems is currently being discussed here:
http://www.zen-cart.com/forum/showth...7&goto=newpost
Although as yet remains unsolved...
Scotty
-
Re: SSL secure and non-secure items
Thanks Scottydog. I ended up switching over to the other contribution until I have time to get this sorted out or someone posts a fix.
-
Re: SSL secure and non-secure items
I posted on the main google analytics thread about this issue, I think I've found a fix:
http://www.zen-cart.com/forum/showth...604#post511604
-
Re: SSL secure and non-secure items
I,m having the same problem on my site.
http://www.elephat.net/
plus:I get ie cannot open the internet site operation aborted on some randon pg.
my Parse Time is a bit slow too.
What the heck is going on.....Help...Thanks
-
Re: SSL secure and non-secure items
Same issue
www.elephat.net
errors on my site:
ie cannot open the internet site operation aborted. on products
this pg contains both secure and nonsecure items. when login
No idea what to look for....Help
-
Re: SSL secure and non-secure items
Quote:
Originally Posted by
romy
I,m having the same problem on my site.
http://www.elephat.net/
plus:I get ie cannot open the internet site operation aborted on some randon pg.
my Parse Time is a bit slow too.
What the heck is going on.....Help...Thanks
Quote:
Originally Posted by
romy
Same issue
www.elephat.net
errors on my site:
ie cannot open the internet site operation aborted. on products
this pg contains both secure and nonsecure items. when login
No idea what to look for....Help
Searching the FAQ area for "secure and nonsecure" brings up the answer:
https://www.zen-cart.com/tutorials/i...hp?article=150
And ... the solution is discussed above in the posts just before yours.
-
Re: SSL secure and non-secure items
Need some direction on what pg's to look on.
How would i code my google search.
Thanks.
-
Re: SSL secure and non-secure items
romy, your problem with security notices related to Google is because you are not using the correct URL for Google.
https://checkout.google.com/buttons/checkout.gif
The above is what is used for the Google Checkout button but the URL is invalid. There is also JS code for the Google button using an 'http' connection; which works fine except on 'https' pages.
You should contact Google to find out the correct URL and change the JS code.
Also, there are coding errors within your Template which should be corrected as well.
-
Re: SSL secure and non-secure items
Hot sure how to read the coding errors.
What page or pages is the validator reading.
Thanks.
-
Re: Going back to the root makes root pages ssl
Zen cart is not installed in the root of my site, it's in http://www.domain.com/store. The store has only relative links and so works just fine going back and forth between secure store pages and non-secure store pages. The problem I get is that when you are on a secure store page and attempt to go to the root files (non store files), it sends you to https://www.domain.com instead of http, which leads to the ol' non-secure items nag in IE. How do I get it to recognize my links back to the root of the site are not ssl pages?
-
Re: Going back to the root makes root pages ssl
I have tried what i think is everything on a site we just developed and can't figure it out. The site is http://www.te ch or ium.c om (remove spaces). To see the issue (in IE) just add any product to the cart and then go to check out and the infamous message secure/nonsecure appears. Any suggestions will be greatly appreciated. I have even tried removing the entire header and left column which use background images, and even disabled the CSS completely, to no avail.
Thanks.
-
Re: SSL secure and non-secure items
I was getting that same problem and found out it was the tpl_main_page file which you can find in zen cart/Includes/templates/templates_default/common - What i did was to open the file and change the http part at the bottom of that file to https and it cures the internet explorer 7 problem.
It was that simple for me and it's probably some image on your page needing this done to it.
My example below.
<a href="http://www.instantssl.com" id="comodoTL">SSL</a>
<script language="JavaScript" type="text/javascript">
COT("https://www.darkrealmfox.com/catalog/secure_site.gif", "SC2", "none");
</script>
I originally had the http part set to https. Also remember to set the link to https://www and not just https://
-
Re: SSL secure and non-secure items
Looking for some solution but still getting nut about that....
in CSS, all my image are relative links..
But all image, in login step, checkout step in IE 8 didnt show because they are non secure.
URL: http://monpetitsinge.com/
I posted the souce code but it as to many characters, so anyone can log on with IE 8 and take a look at my source code ?
THx a lot.
-
Re: SSL secure and non-secure items
I want to know if a have to change all http links to my SSL links to get properly working all my images ?
-
Re: SSL secure and non-secure items
ive tried your site hawlisjawt using IE6 and IE7. Only IE7 gives that secure and non secure thingy. Wonder why...?
-
Re: SSL secure and non-secure items
This problem is fixed since a long time :P ? I have no more popup from ie secure non secure
Look for hard-coded links that didint have https:
View your html source you gonna find it
-
Re: SSL secure and non-secure items
hi...Im actually informing you that when i visit your store, i still see the IE secure and non secure pop up ... im using IE7 to visit your store..
-
Re: SSL secure and non-secure items
Here evreything is fine with ie 8 !
-
Re: SSL secure and non-secure items
I have the same problem. I scoured all my files in the template section and don't seem to find anything related to hard coded links such as "http://......" What exactly am I looking for in these files that create the "http://..." in the pages when i do see them using "view source" in my browser for the pages causing the secure non-secure popup? I am totally lost what it's being offered as solotions here. Please help...:no:
-
Re: SSL secure and non-secure items
Why don't you post your URL so others can take a look?
-
Re: SSL secure and non-secure items
I also have secure / nonsecure issues on our site.
The worrisome section is here: https://www.vermontyarnco.com/store/ --this bit *should* be secure. So should all the subpages and the GET queries (e.g. http://www.vermontyarnco.com/store/i...ndex&cPath=243 ) but clicking on a category is not sending me to secure pages.
I have checked links to offsite services (such as addthis and google-plus) and converted those to https where needed (in my own templates tpl_footer and tpl_header)
I did alter the includes/configure.php file also, but it does not seem to be fixing the issue:
Code:
// Define the webserver and path parameters
// HTTP_SERVER is your Main webserver: eg-http://www.yourdomain.com
// HTTPS_SERVER is your Secure webserver: eg-https://www.yourdomain.com
define('HTTP_SERVER', 'https://www.vermontyarnco.com');
define('HTTPS_SERVER', 'https://www.vermontyarnco.com');
// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');
I did try Dr. Bytes ssltest.php script and it looked correct (https://www.vermontyarnco.com/store/ssltest.php) it appears teh SSL certificate (this is the first one I've tried t work with) is installed correctly but I am not sure what I need to adjust correctly elsewhere.
Still running 1.3.9 (it was such a timesink to upgrade last time that I haven't found time to do it again)
Could someone give me fresh eyes on this?
Thank you ever so much!
Kir
-
Re: SSL secure and non-secure items
While you have your SSL setup correctly, you site is NOT designed to be secure for *everything* (which is normal for a ZC store) ...
You will notice if you mouse over Login that this is a secure link with https: in the link ... if you mouse over other things that do not need to be secure you will see http: in the link ...
-
Re: SSL secure and non-secure items
I've had a lot of problems with my Website following the application of an SSL. Although I have edditted configure.php the url appears in Firefox without "http://" or "https://", but the Page Info advises that it is not encrypted. If I type "https://" in front of the url then the Page Info advises that it is encrypted, but if I leave then return to the page the encryption is lost.
My Website has two distinct sections: my original HTML www.mydomainname.com and a subsequently added Zen Cart shop (v1.5.1), php mydomainname.com. I confess to not knowing why the php shop section does or doesn't take up the “www.”, but is having one section with the “www.” and other without it causing problems when trying to apply the SSL?
Regards
Bob