SSL warning message

[trebo70]

Hello

The following issue is found on this site: http://www.chivasskincare.com

I'm having problems in both Firefox (version 3.0.8) and IE (version 7) when I go to the secure server. In firefox once I'm on the logon page I get an exclamation point over the padlock with a message "warning: contains unauthenticated content" in IE I get a pop up window that says "this page contains both secure and nonsecure items. Do you want to display the nonsecure items?" I have zen cart version 1.3.8a. I called network solutions and they said it was because I had some urls with http instead of https. I looked at the source code for the page and found the base tag had http instead of https. Is this the cause of it?
Any help would be greatly appreciated.

thanks,
Tre

[tony_sar]

is result of images that have absolute path using HTTP .. all secure contents need to have HTTPS
your logo.
also background image may or may not effect this , but all style sheet elements need to be added to image folder under your custom template and not under image folder in root , which is for product images.

[trebo70]

Thanks for your reply Tony. I went into the style sheet and there were two background images that I moved to the images folder under the custom folder. However I'm still getting an error: https://www.chivasskincare.com/index...ain_page=login. If you go to that page and view the source you'll see there are no images with http in the url. There are a few links that are using http and they are the base tag and the shopping cart and the blog links. I can't for the life of me find where to go to change these links. Do you have any idea where I can look?

thanks again for your help,
Tre

[CoolCarPartsOnline]

The link to your logo is absolute. The logo should be in the template folder.

[trebo70]

The link to your logo is absolute. The logo should be in the template folder.

I don't think the link to the logo is absolute. Did you look at the source? (<img src="images/chivas_logo1.jpg" alt="Chivas Skin Care" border="0">) If that is an absolute link then I stand corrected but I don't think it is.

About the logo being the template folder here is where it is located: /includes/templates/custom/images

Anymore help would be greatly appreciated.

thanks,
Tre

[tony_sar]

this is path to your logo ..

http://www.chivasskincare.com/images/chivas_logo1.jpg

it is still in image directory under root .. you need to move this to image directory in your custom template.

[mprough]

It not correct that you are required to move images to the template images folder....

Here is what needs to happen

Image links must be to hhtps:// or use relative links.

So for your header

change http://www.chivasskincare.com/images/chivas_logo1.jpg

to images/chivas_logo1.jpg

Another possible issue

<script language="javascript" type="text/javascript"><!--
function session_win() {
  window.open("http://www.chivasskincare.com/index.php?main_page=info_shopping_cart","info_shopping_cart","height=460,width=430,toolbar=no,statusbar=no,scrollbars=yes").focus();
}
//--></script>

~Melanie

[Website Rob]

I don't think the link to the logo is absolute. Did you look at the source? (<img src="images/chivas_logo1.jpg" alt="Chivas Skin Care" border="0">) If that is an absolute link then I stand corrected but I don't think it is.

About the logo being the template folder here is where it is located: /includes/templates/custom/images

Anymore help would be greatly appreciated.

thanks,
Tre

Tre, when you code for images do not start the path with a forward slash. Leave it off as it is included in the 'base href=" statement at top of each page.

Speaking of which, on your 'https' page the 'base href=' statement is showing "http" instead of "https". Did you manually change something in your config file because that's not right.

[trebo70]

Tre, when you code for images do not start the path with a forward slash. Leave it off as it is included in the 'base href=" statement at top of each page.

Speaking of which, on your 'https' page the 'base href=' statement is showing "http" instead of "https". Did you manually change something in your config file because that's not right.

Thanks everyone for all your help so far.
Rob, I removed the forward slash like you suggested.
I agree about the base tag having the http instead of the https. How can I change that? I'm pretty sure that I have my includes/configure.php done correctly. Here is the code that may have been done incorrectly:
define('HTTP_SERVER', 'http://www.chivasskincare.com');
define('HTTPS_SERVER', 'https://www.chivasskincare.com');

define('ENABLE_SSL', 'true');

define('DIR_WS_CATALOG', '/');
define('DIR_WS_HTTPS_CATALOG', '/');

Also the blog link in the left navigation has http instead of https. How can I change that? I can't find where its at. Its not the typical sidebar navigation. It was custom made.

thanks,
Tre

[CoolCarPartsOnline]

Having https or http has nothing to do with Zen Cart configure file. All you need to do is change the link from http to https, to do that you open the zen cart file the contain that tag and change the http:// at the beginning of the URL to https://.

I don't think the link to the blog will cause any warning issue as you are not calling for that link to be displayed on that page. If it was an image or a script then it would cause an error message.