Page contains nonsecure items warning?

[ComicsXP]

I've searched through the forum, and tried to find the most appropriate threads. I've followed the instructions and solutions offered in all of them, but still have been having no luck. I've also tried asking my questions within those threads, but have not gotten any replies. I've also read all the FAQ answers on zen-cart, and followed those instructions with no luck.

I've set up a zen-cart store, and it opperates perfectly, but after I installed the SSL certificate, I started getting the "this page contains secure and nonsecure items" warning.

I've gone through every option I can think of. I've checked:

- That none of the links are leading to outside pages.
- That there are no hard-coded http:// links
- None of the images are using src=http
- I've tried turning on and off every single sidebox, until only the header and footer remained, still the message was popping up.

I have been recieving emails from customers, saying that they don't feel safe buying on the site, because of that popup warning.

Any and all help towards this solution would be greatly appreciated.

Here's the includes/configure.php

define('HTTP_SERVER', 'http://www.comicsxp.com');
define('HTTPS_SERVER', 'https://www.comicsxp.com');

define('ENABLE_SSL', 'true');

define('DIR_WS_CATALOG', '/cxpstore/');
define('DIR_WS_HTTPS_CATALOG', '/cxpstore/');


and here's the admin/includes/configure.php

define('HTTP_SERVER', 'http://www.comicsxp.com');
define('HTTPS_SERVER', 'https://www.comicsxp.com');
define('HTTP_CATALOG_SERVER', 'http://www.comicsxp.com');
define('HTTPS_CATALOG_SERVER', 'https://www.comicsxp.com');

define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');

In case it was unclear, the store url is www.comicsxp.com

Thanks guys.

[stevesh]

Looks like you got it fixed?

[hhstudio]

I am seeing the same thing does this happen with the classic template?

If it SSL works in the classic template but not the custom then I would have to say there is something in that template that is being called wrong. Has this just started happening.

Did it ever work with SSL before?

[CybaGirl]

I think you will find that it might have something to do with whatever swf files you are using. I had the same issue on my site until I disabled my flash banners which were being shown at the bottom of the page. I fixed my problem by disabling them from being shown under SSL in my admin panel.

The problem is also not shown when using Firefox (I am using version 2.0.0.20) but when I view your page using my IE plugin for Firefox then the non secure and secure message pops up. I also tested your login page with IE version 7.0.5730.11 and the non secure and secure message comes up.

As suggested in a previous post. Try switching back to the classic template and see if you still get this problem. But I am thinking you won't as I am thinking it has something to do with the swf files you are using.

[ComicsXP]

Well, I fixed the problem.

It wasn't the swf as you had suggested, but that did make me think to check on some of the other uncalled scripts.

I added lightbox to the pages, for previewing comic pages. It turns out, this was the culprit all along.

Thank you everyone for taking the time to try and help me. In the hopes that this will save someone else some headaches, here was the fix I applied.

Since I wanted to keep Lightbox, but there is no need for it to show up on the secure pages (checkout, my account). I changed the script for lightbox to this:

if (getenv('HTTPS') == 'on') {
// do nothing
} else {
// echo the script for lightbox here
}

Basically, this turned off Lightbox, if the page is in https mode. So, no more call, no more problem.

Thank you again, everyone.

[JQPublic]

Well, I fixed the problem.

It wasn't the swf as you had suggested, but that did make me think to check on some of the other uncalled scripts.

I added lightbox to the pages, for previewing comic pages. It turns out, this was the culprit all along.

Thank you everyone for taking the time to try and help me. In the hopes that this will save someone else some headaches, here was the fix I applied.

Since I wanted to keep Lightbox, but there is no need for it to show up on the secure pages (checkout, my account). I changed the script for lightbox to this:

if (getenv('HTTPS') == 'on') {
// do nothing
} else {
// echo the script for lightbox here
}

Basically, this turned off Lightbox, if the page is in https mode. So, no more call, no more problem.

Thank you again, everyone.

Which file did you edit and where exactly did you place your change?
I'm about to run screaming into the night with the same problem you had. I am about to start promoting my site and I know people will not make any purchases with that warning.