SSL Problem - "insecure content"

[bridge32]

Hello,
I have had a new ssl certificate installed on my site, and it is installed correctly as per the hosting account and zencart configurations in the configure.php files.
I have a small issue where there are some problems with insecure content.
I have checked all image src and the ones i can see are set up as https or http. If i change these, it makes no difference on the warnings i get.
If i go to https://www.cakekraft.co.uk i get padlock errors saying the content is insecure in Chrome, Firefox and IE9, but if i use the standard http:// address all is ok.
You can check by clicking the log in or create account on the right as this automatically goes to https://

I disabled all banners, and removed icons etc, but i still cannot find what image is causing the problem.

Can someone take a look at my site and maybe give me an idea what is causing this security problem.
Thank you
Nic.

[Ajeh]

You appear to have a number of images that are called absolute rather than relative in your banners ...

In FireFox, go to the link you posted and look at the Media tab and you will see a number of images as http rather than https ... those need to be fixed ...

[DrByte]

http://www.zen-cart.com/content.php?...lly-encrypted)

[bridge32]

You appear to have a number of images that are called absolute rather than relative in your banners ...

In FireFox, go to the link you posted and look at the Media tab and you will see a number of images as http rather than https ... those need to be fixed ...

Ok thank you for getting back to me.
So this issue looks like the images are hardcoded then.
Im glad it is something that can be fixed.
If i look at the images by the way you mentioned, there are some in the banners as http rather than https, so i suppose it is a case of changing the url to the https one in one of the template files.
I will also change the js url for google too as i feel this could cause problems.
If i run into any problems, or i get stuck, do you mind if i repost here for further help?
Dr Byte, thanks for the link, makes it easier to take it in, thanks.
Nic

[bridge32]

Just wanted to pop back on to say i have now sorted out the ssl errors i was getting.
Thanks to Dr Byte and Ajeh for their advice.
It was causing problems on my https pages, especially checkout etc, so i done some digging around in the files and found some old javascript (pointing to http) which was not used any more.
I deleted it, and now all my https pages for checkout and create account etc, work perfectly.
I will say however, that if you go to my homepage with https, it will still error, but as it is not needed for ssl reasons as no info is stored, i am ok with that until i have time to sort that one out!
So now people can order in confidence
Cheers
Nic

[Ajeh]

You could probably fix that in the slider ... how do you have the images coded for that?

[bridge32]

Hi Ajeh,
The slider was done by the designer, so not sure how to find this out.
However, the images are in the banner manager, and the banners are sent to this url: http://www.cakekraft.co.uk/cake-deco...er-decorations but the images are picked up from the /home/www/cakekraft.co.uk/images/banners/
Does this help?
Nic

[DrByte]

This looks wrong:

<a href="https://pinterest.com/cakekraft/"><img src="//assets.pinterest.com/images/pinterest-button.png" width="80" height="28" alt="Follow Me on Pinterest" /></a>

and, yes, your slider is using http://your_site_name/etc/etc when it could be using relative paths instead, which would then stop the insecure alerts.

[bridge32]

Hello again,
We i have spent over an hour to try and loctae the file Ajeh mentioned, but for the love of me i could not locate anything except the one she linked.
This means i cannot get to the file to amend the image url's
I have even gone to the developers site, and checked the files in the installation read me file, and funny enough, the file does not exist on my site lol.
So this "file" is somewhere else.
Not to worry yet, ill keep digging around.
Dr Byte - The section you pointed out (pinterest) was taken from their workaround pages to overcome ssl issues. You are right though, it should have been:
<a href="http://pinterest.com/USERNAME/"><img src="http://passets-ec.pinterest.com/images/about/buttons/pinterest-button.png" width="80" height="28" alt="Follow Me on Pinterest" /></a>

[Ajeh]

How about a search on:

<div id="slider">