Possible Scripting Issue with SSL

[CobraPlant]

I've been using version 1.3.8a for a couple years with good results. Today, I did a test purchase to test a few coupon codes, and I noticed that on the https pages, the images for the buttons were missing. Right now, it's showing only text where the buttons should go.

On a previous test purchase about a month ago, all buttons were intact, and the checkout process worked smoothly. I called my web host (BlueHost), and they said it was a scripting issue with Zen Cart.

My site is http://www.cobraplant.com. You can see the missing button images when you click to the sign in page. In fact, several images on the right panel and near the footer are also missing when you go to any SSL or https page.

I don't recall changing any settings in my control panel. Any thoughts on what I can do to fix the SSL pages so that all button images show up?

[DrByte]

I noticed that on the https pages, the images for the buttons were missing.

WHICH buttons are allegedly missing?
Right-click on them and copy the button URL to your clipboard and paste it here. And try opening the button image (via right-click) in your browser.
And, on the page where that button is "missing", right-click and choose View Source, and find the HTML for that button, and see what it says.
Post your findings here.

Almost certainly something hard-coded incorrectly in your custom template.

[DrByte]

I should also add that you REALLY need to upgrade immediately.
Your version contains known serious security bugs, which were fixed in subsequent versions several years ago. But you must upgrade to get the protection benefit.

[RescoCCC]

I'm getting a 403 Forbidden error when attempting to load the images directly. Example:

http://www.cobraplant.com/images/logo-facebook1.png

However, it isn't happening on all images.

[RescoCCC]

PS: I'm getting 403 errors on some with or without s.

[CobraPlant]

I'm getting a 403 Forbidden error when attempting to load the images directly. Example:

http://www.cobraplant.com/images/logo-facebook1.png

However, it isn't happening on all images.

Thanks Resco! You helped me pinpoint the problem. For some reason, I activated the hotlink protection on my website control panel. I did this because another site kept linking to my jpg images. I didn't realize it would affect images on SSL pages. I disabled the hotlinks, and SSL pages are working fine. PROBLEM SOLVED!

And I'll update my site this month.

[RescoCCC]

Yep, now loading fine for me.

[DrByte]

Okay, I found one button that's not showing properly:

http://www.cobraplant.com/includes/t...on_in_cart.gif
vs
https://www.cobraplant.com/includes/...on_in_cart.gif

That's not a "Zen Cart scripting problem". It's a server misconfiguration problem. Talk to your host to fix the problem which is preventing images from displaying only in SSL mode.

[CobraPlant]

Okay, I found one button that's not showing properly:

http://www.cobraplant.com/includes/t...on_in_cart.gif
vs
https://www.cobraplant.com/includes/...on_in_cart.gif

That's not a "Zen Cart scripting problem". It's a server misconfiguration problem. Talk to your host to fix the problem which is preventing images from displaying only in SSL mode.

Thank you for the swift reply! Two things. First, when you say that it's a "server misconfiguration problem," what do you mean by that? I'm only asking this because I want to prevent any back-and-forth dialogue with you and my web host. If I can gently nudge them in the right direction by suggesting they take a look at the configuration, I might get quicker results. I'm just not sure what configuration they should be looking at.

Secondly, I will upgrade very shortly now that I'm in the slow season. Is 1.5 ready to go live? Or should I use 1.3.9h?