Unsecure items in SSL pages

[Quedex]

This website im doing has just had the SSL installed so i go into my two configure files and turn on HTTPS

i know i havent used hard coded links as i made a point not to but my base href is referencing HTTP on my secure pages i checked the relevant files and they seem to be fine with..

<base href="<?php echo (($request_type == 'SSL') ? HTTPS_SERVER . DIR_WS_HTTPS_CATALOG : HTTP_SERVER . DIR_WS_CATALOG ); ?>" />

the site can be found @ www.joshlingerie.com

any help would be appreciated

[schoolboy]

Talk to your host... The problem appears to be with your stylesheet.

[Quedex]

Thanks for the reply

i have checked the stylesheets none have hard coded urls or any problems i can see ?

[DrByte]

This website im doing has just had the SSL installed so i go into my two configure files and turn on HTTPS

i know i havent used hard coded links as i made a point not to but my base href is referencing HTTP on my secure pages

Then your host has configured the SSL incorrectly in the server settings.

[Quedex]

Thats what im thinking as there is no way to set the base href except from server side right ?

the base href is referencing http so of course all the relative paths will be from http and not https and thats the problem im having i'll email them again if that doesnt work i'll ring them

thanks guys

[DrByte]

Zen Cart calculates the correct base href based on whether your server is properly reporting that it's in SSL mode.
There are a few oddball hosting companies who can't seem to figure out how to do that properly. Hopefully yours isn't one of them.

[Quedex]

i did see Ajeh's post with the....

<?php
$request_type = ((isset($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) == 'on') || (isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == '1') || (isset($_SERVER['HTTP_X_FORWARDED_BY']) && strstr(strtoupper($_SERVER['HTTP_X_FORWARDED_BY']),'SSL')) || (isset($_SERVER['HTTP_X_FORWARDED_HOST']) && strstr(strtoupper($_SERVER['HTTP_X_FORWARDED_HOST']),'SSL')) || (isset($_SERVER['SCRIPT_URI']) && strtolower(substr($_SERVER['SCRIPT_URI'], 0, 6)) == 'https:') || (isset($_SERVER['SERVER_PORT']) && $_SERVER['SERVER_PORT'] == '443' ) ) ? 'SSL' : 'NONSSL';
echo 'I SEE ' . $request_type;
?>

php test i put it on my server and https://www.joshlingerie.com/test.php comes back as i see NONSSL

can i use this to hassle my hosting company ?

many thanks

[DrByte]

You can try. Good luck.

[Quedex]

thanks for all the help guys i know a little php but server configurations are beyond me without you guys i'd be lost

running that script should report back as i see SSL then if all is correct is that right? i just need a bit of ammo if the hosts say it's my problem AGAIN !

[DrByte]

Yes .