Results 1 to 6 of 6
  1. #1
    Join Date
    Jan 2012
    Posts
    2
    Plugin Contributions
    0

    Default SSL Nonsecure Items Problems w/ Base href

    Hi all. I'm new to the support forums, but I am truly in need of advice, assistance.

    Zen Cart Version: 1.3.9h Fresh install w/custom template
    1 Addon: Testimonials Submission
    Hosting Company: Network Solutions (nsShared hosting)
    Site URL: m c k i n n o n m o u n t a i n w o o d c r a f t . c o m

    First of all I would like to say thanks for all of the valuable information contained in the forums. I've been able to successfully design and build an attractive storefront.

    My only issue is related to SSL. I configured my site earlier this week for SSL. Firefox is fine, IE gives the "nonsecure items" message.

    There aren't any absolute paths configured for images, bg, etc. And when I view source while in https mode, my base href and of course all trailing urls begin with http.

    My configure.php files are configured with simply http://www.mywebsite.com and https://www.mywebsite.com. This configuration gives me the IE notice box regarding nonsecure items.

    If I tweak my configure.php file and change http://www.mywebsite.com to just //www.mywebsite.com everything then appears to work fine with one exception. Once in https mode there is not getting out.

    Now obviously I don't want to keep this nonstandard configuration, but it was useful for testing. I've contacted NS (hosting) and they have basicually thrown their hands in the air and blamed my code or the code within Zen Cart.

    Does anyone have any advice for me?

  2. #2
    Join Date
    Jan 2004
    Posts
    66,443
    Plugin Contributions
    279

    Default Re: SSL Nonsecure Items Problems w/ Base href

    Quote Originally Posted by coledorsey View Post
    Hosting Company: Network Solutions (nsShared hosting)
    That's your problem.

    Network Solutions has always used a non-standard SSL configuration, and makes Zen Cart incompatible with their hosting service. There are many existing forum threads related to this very problem specifically when hosted with netsol.

    You have two options:
    a) run your ENTIRE site in SSL ... ie: set your HTTP_SERVER to be what your HTTPS_SERVER setting contains. Then ALL your pages will be SSL-protected. This may or may not negatively affect your search engine rankings.

    b) choose a more conventional hosting service which uses up-to-date technology and standard server configurations
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  3. #3
    Join Date
    Jan 2012
    Posts
    2
    Plugin Contributions
    0

    Default Re: SSL Nonsecure Items Problems w/ Base href

    Thank you for your advice DrByte. It is most appreciated. This is sort of the conclusion I had come to after reviewing the numerous posts already in the forum, but was not sure.

    One more question. Since the SSL certificate has already been purchased from Network Solutions, and this nonstandard configuration of NS with handling SSL certs in ZenCart has been identified......

    Can I keep the SSL with NS and migrate my ZenCart to Bluehost without encountering the same issues?

    I've already had a brief conversation with BH and they advised I keep the SSL with NS, but based on your knowledge of ZenCart issues, I wanted to ask you as well.

  4. #4
    Join Date
    Jan 2004
    Posts
    66,443
    Plugin Contributions
    279

    Default Re: SSL Nonsecure Items Problems w/ Base href

    Sure, the certificate itself should be able to be installed on most any other server.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  5. #5
    Join Date
    Jan 2004
    Posts
    66,443
    Plugin Contributions
    279

    Default Re: SSL Nonsecure Items Problems w/ Base href

    While you still have access to your netsol server, try this ssltest script, and report back its output:
    http://www.zen-cart.com/forum/showpo...87&postcount=4
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  6. #6
    Join Date
    Jan 2004
    Posts
    66,443
    Plugin Contributions
    279

    Default Re: SSL Nonsecure Items Problems w/ Base href

    Did you happen to do the test suggested?
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

 

 

Similar Threads

  1. v138a ssl issue with base href and load balancer
    By peeceelee in forum Basic Configuration
    Replies: 7
    Last Post: 17 Nov 2012, 05:16 PM
  2. secure and nonsecure items base href?
    By JJDoench in forum General Questions
    Replies: 20
    Last Post: 5 Jan 2010, 05:03 AM
  3. SSL Problem (Base href???)
    By DaveS in forum General Questions
    Replies: 24
    Last Post: 4 Sep 2009, 06:23 PM
  4. https error relating to base href SSL
    By little dog in forum Basic Configuration
    Replies: 3
    Last Post: 18 Dec 2007, 08:12 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg