SSL problem in Google Chrome

04 Oct 2014, 11:20

#1

Zen Follower

Join Date:: Jun 2009
Posts:: 275
Plugin Contributions:: 0

SSL problem in Google Chrome

Hey all,

I'm sure this has nothing to do with Zen-Cart but am hoping someone has an answer.

I am all of a sudden having a problem with ssl but only in Google Chrome. It shows the little lock but has a yellow warning icon over it. It is saying the page is encrypted but contains items that are not. This happened overnight. Explorer and Firefox are not showing this. I have checked all my images and such and all are in order.

The website is https://www.dxxxxmed.com/ change x's to 4 letter o's. Maybe just on my end?

Thanks for any advice!

04 Oct 2014, 12:38

#2

gilby

Totally Zenned

Join Date:: Aug 2005
Posts:: 1,816
Plugin Contributions:: 0

Re: SSL problem in Google Chrome

doooomed:
Hey all,

I'm sure this has nothing to do with Zen-Cart but am hoping someone has an answer.

I am all of a sudden having a problem with ssl but only in Google Chrome. It shows the little lock but has a yellow warning icon over it. It is saying the page is encrypted but contains items that are not. This happened overnight. Explorer and Firefox are not showing this. I have checked all my images and such and all are in order.

The website is https://www.dxxxxmed.com/ change x's to 4 letter o's. Maybe just on my end?

Thanks for any advice!

Nope, you have the problem in the other browsers as well.
Here are 3 links that are NOT https to start with

http://www.doooomed.com/images/facebook_button.jpg
http://doooomed.com/images/tweeter_button.jpg
http://doooomed.com/images/tumblr-32x32.png

04 Oct 2014, 12:50

#3

doooomed

Zen Follower

Join Date:: Jun 2009
Posts:: 275
Plugin Contributions:: 0

Re: SSL problem in Google Chrome

Thanksfor the reply!

Okay, I shouldn't have given you that url with https as that is not an https page. if you go to dXXXXmed.com (again, replace x's with o's) and go to log in, that is where I am having the problem.

04 Oct 2014, 13:51

#4

gilby

Totally Zenned

Join Date:: Aug 2005
Posts:: 1,816
Plugin Contributions:: 0

Re: SSL problem in Google Chrome

doooomed:
Thanksfor the reply!

Okay, I shouldn't have given you that url with https as that is not an https page. if you go to dXXXXmed.com (again, replace x's with o's) and go to log in, that is where I am having the problem.

Ok Still lots of links with http: instead of https:
Looks like a lot of them are rewritten
Try turning OFF your URL re-writer and see if that makes a difference?
Your re-writer may need some more work...

04 Oct 2014, 14:11

#5

doooomed

Zen Follower

Join Date:: Jun 2009
Posts:: 275
Plugin Contributions:: 0

Re: SSL problem in Google Chrome

gilby:
Ok Still lots of links with http: instead of https:
Looks like a lot of them are rewritten
Try turning OFF your URL re-writer and see if that makes a difference?
Your re-writer may need some more work...

I turned the re-writer off. The problem still exists in chrome but no other browsers. Like I mentioned earlier this happened over night while I was sleeping. Everything on the page is the same as it has been for months. What links without https are you talking about? Sidebox links? The images all have https.

Thank you!

04 Oct 2014, 15:07

#6

doooomed

Zen Follower

Join Date:: Jun 2009
Posts:: 275
Plugin Contributions:: 0

Re: SSL problem in Google Chrome

I don't know how well https://www.whynopadlock.com/ works but I checked https://dxxxxmed.com/index.php?main_page=login and it returned all items being secure.

04 Oct 2014, 16:01

#7

rodg

Deceased

Join Date:: Jan 2007
Posts:: 6,263
Plugin Contributions:: 3

Re: SSL problem in Google Chrome

doooomed:
I don't know how well https://www.whynopadlock.com/ works but I checked https://dxxxxmed.com/index.php?main_page=login and it returned all items being secure.

Right at the top/start of the page you have the following code:

<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en" xmlns:fb="http://www.facebook.com/2008/fbml">

This is why the page is showing insecure items (at a guess)

Cheers
RodG

04 Oct 2014, 16:41

#8

doooomed

Zen Follower

Join Date:: Jun 2009
Posts:: 275
Plugin Contributions:: 0

Re: SSL problem in Google Chrome

RodG:
Right at the top/start of the page you have the following code:
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en" xmlns:fb="http://www.facebook.com/2008/fbml">
This is why the page is showing insecure items (at a guess)

Cheers
RodG

Thanks but I removed that code and still get the same results :frusty:

04 Oct 2014, 16:56

#9

rodg

Deceased

Join Date:: Jan 2007
Posts:: 6,263
Plugin Contributions:: 3

Re: SSL problem in Google Chrome

doooomed:
Thanks but I removed that code and still get the same results :frusty:

There's another..

<!--bof-header logo and navigation display-->


<div class="fb-like" data-colorscheme="dark" data-font="verdana" data-href="http://www.doooomed.com" data-send="true" data-show-faces="false" data-width="300">


     </div>


<div id="headerWrapper">

Cheers
Rod

04 Oct 2014, 17:14

#10

doooomed

Zen Follower

Join Date:: Jun 2009
Posts:: 275
Plugin Contributions:: 0

Re: SSL problem in Google Chrome

RodG:

There's another..

<!--bof-header logo and navigation display-->


<div class="fb-like" data-colorscheme="dark" data-font="verdana" data-href="http://www.doooomed.com" data-send="true" data-show-faces="false" data-width="300">


     </div>


<div id="headerWrapper">

Cheers
Rod

Unfortunately still no change. All that code I am removing has been there a long time...!

04 Oct 2014, 17:50

#11

rodg

Deceased

Join Date:: Jan 2007
Posts:: 6,263
Plugin Contributions:: 3

Re: SSL problem in Google Chrome

doooomed:
Unfortunately still no change. All that code I am removing has been there a long time...!

I'm pretty much out of ideas/suggestions. About the only other thing I'm seeing shouldn't be causing the problem anyway, but that is, at the very bottom of the page is a stray "<" character.

Aha! I think I found it.

                                             <script><!--
function session_win() {
  window.open("http://doooomed.com/index.php?main_page=info_shopping_cart","info_shopping_cart","height=460,width=430,toolbar=no,statusbar=no,scrollbars=yes").focus();
}
//--></script>

Cheers
RodG

04 Oct 2014, 18:13

#12

doooomed

Zen Follower

Join Date:: Jun 2009
Posts:: 275
Plugin Contributions:: 0

Re: SSL problem in Google Chrome

Aha! I think I found it.

                                             <script><!--
function session_win() {
  window.open("http://doooomed.com/index.php?main_page=info_shopping_cart","info_shopping_cart","height=460,width=430,toolbar=no,statusbar=no,scrollbars=yes").focus();
}
//--></script>

Are you saying this code is incorrect or shouldn't be there at all? I removed it but nothing changed. I put it back because I don't know what it does.

05 Oct 2014, 07:57

#13

rodg

Deceased

Join Date:: Jan 2007
Posts:: 6,263
Plugin Contributions:: 3

Re: SSL problem in Google Chrome

doooomed:

Are you saying this code is incorrect or shouldn't be there at all? I removed it but nothing changed. I put it back because I don't know what it does.

Good morning.

Apparently I wasn't thinking too clearly last night with my previous suggestions. I'll put it down to being overtired.

I've taken another look into this today and am kicking myself for all the bad leads I gave you.

The problem is being caused because one of the form actions is pointing to a non ssl page. Specifically,

<!--// bof: artists //-->
<div class="rightBoxContainer" id="artists" style="width: 190px">
<h3 class="rightBoxHeading" id="artistsHeading"><label>Bands</label></h3>
<div id="artistsContent" class="sideBoxContent centeredContent">
<form name="artist_form" action="http://dxxxxmed.com/index.php?main_page=index" method="get"><input type="hidden" name="main_page" value="index" /><input type="hidden" name="typefilter" value="artist" />
<select name="artists_id" onchange="this.form.submit();" size="MAX_RECORD_ARTISTS_LIST" style="width: 90%; margin: auto;">

The 'action' link needs to be "https://dxxxxmed.com"

I made this determination by viewing the page with Chrome, then from the Chrome menu selecting 'tools->Javascript_console'

This gave the following info:
The page at 'https://dxxxxmed.com/index.php?main_page=login' was loaded over HTTPS, but is submitting data to an insecure location at 'http://dxxxxmed.com/index.php?main_page=index': this content should also be submitted over HTTPS.

This gave me a clue that I should be looking at the form/submit elements, so I then did a search on the "view-source" of the page which gave me the form link I've given above. It is the only form link on the page that doesn't use "https".

The only thing that puzzles me now is *why* this link isn't using https, because to the best of my knowledge these links are dynamically generated from the configure.php settings. I think that this is something you'll need to determine for yourself though.

Also, although not relevant to the problem, you see the "MAX_RECORD_ARTISTS_LIST"? This should actually 'resolve' to a number (so it reads something like size="25". This implies that there is probably a missing entry in your database configuration table.

Hopefully this info will help you resolve the problem.
Apologies for leading you astray last night. I should have used the Chrome tools in the 1st place rather than just looking at the page code.

Cheers
RodG

05 Oct 2014, 11:21

#14

doooomed

Zen Follower

Join Date:: Jun 2009
Posts:: 275
Plugin Contributions:: 0

Re: SSL problem in Google Chrome

Thanks for all the help and time you put into this. I really appreciate it!

In /public_html/includes/templates/mostlygrey/sideboxes/tpl_artists_select.php I found

<?php
/**
* Side Box Template
*
* @package templateSystem
* @copyright Copyright 2003-2006 Zen Cart Development Team
* @copyright Portions Copyright 2003 osCommerce
* @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
* @version $Id: tpl_artists_select.php 4773 2006-10-17 06:10:58Z drbyte $
*/
$content = "";
$content .= '<div id="' . str_replace('_', '-', $box_id . 'Content') . '" class="sideBoxContent centeredContent">';
$content .= zen_draw_form('artist_form', zen_href_link(FILENAME_DEFAULT, '', 'NONSSL', false), 'get');
$content .= zen_draw_hidden_field('main_page', FILENAME_DEFAULT) . zen_hide_session_id() . zen_draw_hidden_field('typefilter', 'artist');
$content .= zen_draw_pull_down_menu('artists_id', $artists_array, (isset($_GET['artists_id']) ? $_GET['artists_id'] : ''), 'onchange="this.form.submit();" size="' . MAX_RECORD_ARTISTS_LIST . '" style="width: 90%; margin: auto;"');
$content .= '</form>';
$content .= '</div>';
?>

I removed NONSSL and now have..

<?php
/**
* Side Box Template
*
* @package templateSystem
* @copyright Copyright 2003-2006 Zen Cart Development Team
* @copyright Portions Copyright 2003 osCommerce
* @license http://www.zen-cart.com/license/2_0.txt GNU Public License V2.0
* @version $Id: tpl_artists_select.php 4773 2006-10-17 06:10:58Z drbyte $
*/
$content = "";
$content .= '<div id="' . str_replace('_', '-', $box_id . 'Content') . '" class="sideBoxContent centeredContent">';
$content .= zen_draw_form('artist_form', zen_href_link(FILENAME_DEFAULT, '', '', false), 'get');
$content .= zen_draw_hidden_field('main_page', FILENAME_DEFAULT) . zen_hide_session_id() . zen_draw_hidden_field('typefilter', 'artist');
$content .= zen_draw_pull_down_menu('artists_id', $artists_array, (isset($_GET['artists_id']) ? $_GET['artists_id'] : ''), 'onchange="this.form.submit();" size="' . MAX_RECORD_ARTISTS_LIST . '" style="width: 90%; margin: auto;"');
$content .= '</form>';
$content .= '</div>';
?>

It seems to be working now, but I don't know if that was the correct fix.

Now when logged in I am getting the same problem with the main page. It is the social media button images which I found using the method I just learned from you:smile:

What's strange is all this stuff has been in place for a very long time without issue. Maybe a change on Google's end?

Thanks again!

05 Oct 2014, 11:26

#15

doooomed

Zen Follower

Join Date:: Jun 2009
Posts:: 275
Plugin Contributions:: 0

Re: SSL problem in Google Chrome

Actually removing the "NONSSL" made my drop down list in the sidebox disappear! Apparently not the correct fix. I put SSL in it's place and now it seems to be working!

05 Oct 2014, 11:31

#16

rodg

Deceased

Join Date:: Jan 2007
Posts:: 6,263
Plugin Contributions:: 3

Re: SSL problem in Google Chrome

doooomed:

I removed NONSSL and now have..

It seems to be working now, but I don't know if that was the correct fix.

Alas, I couldn't tell you if this is the 'correct' fix or not, but since its working it's probably 'good enough' :)

doooomed:

Now when logged in I am getting the same problem with the main page. It is the social media button images which I found using the method I just learned from you:smile:

Them be words I love to hear. It is the very reason why I gave that info (give a man a fish and he'll eat for a day.. Teach him to fish and he eats for a lifetime).

doooomed:

What's strange is all this stuff has been in place for a very long time without issue. Maybe a change on Google's end?

It seems that way to me.

Cheers
RodG