CSS causing https error

[thealey]

I've discovered that the site I am administering, when viewed with IE, gets the message "Do you want to view only the webpage content that was delivered securely"

This error comes up when logging in and when checking out.

I used HTTPWatch to find out what files were causing the error:

+ 0.000		0.587	725	75030	GET	200	text/html; charset=iso-8859-1	https://gator1034.hostgator.com/~ginabmx/store/index.php?main_page=login&zenid=8ba8332af224eb21d89af07da65785d5
+ 0.248		0.001	0	0	GET	(Cache)	text/css	http://pbpbikes.com/store/includes/templates/12541/css/style_imagehover.css
+ 0.349		0.001	0	0	GET	(Cache)	text/css	http://pbpbikes.com/store/includes/templates/12541/css/stylesheet.css
+ 0.351		0.001	0	0	GET	(Cache)	text/css	http://pbpbikes.com/store/includes/templates/12541/css/stylesheet_boxes.css
+ 0.352		0.001	0	0	GET	(Cache)	text/css	http://pbpbikes.com/store/includes/templates/12541/css/stylesheet_css_buttons.css
+ 0.353		0.001	0	0	GET	(Cache)	text/css	http://pbpbikes.com/store/includes/templates/12541/css/stylesheet_main.css
+ 0.354		0.001	0	0	GET	(Cache)	text/css	http://pbpbikes.com/store/includes/templates/12541/css/stylesheet_tm.css
+ 0.355		0.001	0	0	GET	(Cache)	text/css	http://pbpbikes.com/store/includes/templates/12541/css/print_stylesheet.css
+ 0.356		0.001	0	0	GET	(Cache)	application/javascript	http://pbpbikes.com/store/includes/templates/12541/jscript/jscript_imagehover.js
+ 4.350		0.135	401	1452	GET	404	text/html	http://pbpbikes.com/store/includes/templates/12541/images/bg2.gif
+ 4.351		0.001	0	0	GET	(Cache)	application/javascript	http://pbpbikes.com/store/includes/templates/template_default/jscript/treemenu.js
+ 4.356		0.001	0	0	GET	(Cache)	application/javascript	http://pbpbikes.com/store/includes/templates/template_default/jscript/treemenu_tpl.js
+ 4.376		0.004	0	0	GET	(Cache)	image/jpeg	http://pbpbikes.com/store/includes/templates/12541/images/bg_banner.jpg

How do I get the CSS files to be included to be retrieved via https:// during login? Also the javascript files and the img?

Also, I am using a downloaded template.

Thanks

[kobra]

I suspect one ot two things
Your template is a TemplateMonster template - Known for bad code

Check what file <div class="nav_1"> is in and what the code is...
Look for any non-relative code or http:...instead of ../XXXX/XXX

Other is the requirements for the shared SSL you are utilizing - you may have to place a sub set of files in some SSL location???

These are not normal ZenCart issues as the default code works in a normal setup with a private SSL flawlessley...This has to be either a template issue or the chared SSL

You might rule out the template by switching to the classic template to see what behaviour you see

[stevesh]

Yes, that's the infamous TM 12541 template.

If you post a link to the site, we can probably tell you right away where the problem is.

Most often, it's a link to an outside page, or a hard coded absolute link to a non-secure page in the website.

[kobra]

stevesh,
I think it is here

http ://pbpbikes.com/store/

[thealey]

Yes, that's the infamous TM 12541 template.

If you post a link to the site, we can probably tell you right away where the problem is.

Most often, it's a link to an outside page, or a hard coded absolute link to a non-secure page in the website.

So the problem will be somewhere in the template files?

[kobra]

So the problem will be somewhere in the template files?

As I previously posted
You might rule out the template by switching to the classic template to see what behaviour you see

[Motorcycle Connectio]

Hello,
I recently purchased a dedicated ssl certificate for my site, however in https the sites template and pictures are removed and I get a message about showing only secure items. The ssl was installed by my host. Also in http the site works fine. Is there any configurations I need to do in the cart? Any help would be greatly appreciated. Its not my motorcycleconnections.net site its another site of mine that is in subfiles. Vapor4u.com.

[kobra]

Motorcycle Connection,
You have 3 non secure images/references in your code from other sites

src="http://s7.addthis.com/static/btn/v2/lg-share-en.gif"
src="http://s7.addthis.com/js/250/addthis_widget.js#username=xa-4b43ed27211c7014
src="http://ad.linksynergy.com/fs-bin/show?id=jI1/GSz5744&bids=176539.10000341&subid=0&type=4&gridnum=16

Also check your configure.php files for your domain name & add the www to it as this is what your certificate is issued to
https://www.zen-cart.com/tutorials/index.php?article=14

[thealey]

Sorry, I have been away for awhile.

I changed the template to the original zen cart template but the error in IE still comes up.

So this means that the template is not the issue (which I verified in the code as none of the objects loaded are absolute locations... they are relative.

So how do I get the CSS to load via Https?

[thealey]

AH! Think I found it...

There is a line of code in: includes/templates/template_default/common/html_header.php

<base href="<?php echo (($request_type == 'SSL') ? HTTPS_SERVER . DIR_WS_HTTPS_CATALOG : HTTP_SERVER . DIR_WS_CATALOG ); ?>" />

My guess is that there was an issue where this function wasn't working and was setting the base location as http not https. I merely comment the code out of the file and viola, everything was loaded in https.

Now, I just want to make sure this is okay and that I'm not comprimising the security of the website by removing this?