new SSL - Mixed Content Problems with Image Handler4

[st.bobo]

I recently upgraded to SSL and am having issues in my admin. I have found 2 areas that are problematic and I believe the problem might be caused by 2 different plugins that I have installed: Stock by Attribute (SBA) and Image Handler (superscript 4). I am finding that I get the Mixed Content error because the target is an insecure endpoint. I understand from reading other threads, that this is caused by code referencing the URL http://blah-blah.com instead of simply blah-blah.com.

My question is, how do I find the places that need to be changed?

Example of the error that I am seeing:
Mixed Content: The page at 'https://www.boundlessmotion.com/shop/boss/image_handler.php' was loaded over a secure connection, but contains a form which targets an insecure endpoint 'http://www.boundlessmotion.com/shop/boss/image_handler.php'. This endpoint should be made available over a secure connection.

[mc12345678]

Well, one thing, you should now rename your admin folder as it has been posted for all to see. The next is to take a look at the admin file image_handler.php for cases where either <form is used or zen_draw_form is used and it doesn't use $request_type or otherwise not force http: or https: directly.

Sba, at least the more recent version I thought handled this already, though I guess I've been finding some minor things for it. Oh yeah, there may be a more recent version of IH4 on github that already addresses that issue. Dunno.

[st.bobo]

Well, one thing, you should now rename your admin folder as it has been posted for all to see. The next is to take a look at the admin file image_handler.php for cases where either <form is used or zen_draw_form is used and it doesn't use $request_type or otherwise not force http: or https: directly.

Sba, at least the more recent version I thought handled this already, though I guess I've been finding some minor things for it. Oh yeah, there may be a more recent version of IH4 on github that already addresses that issue. Dunno.

Thanks for the reply. I have updated my admin folder's name (don't ask me what the new name is, I won't tell). I am finding a bunch of zen_draw_form commands without $request_type. And, we are quickly approaching my limits in coding. Any suggestions in how to fix the code? I am using the latest version of image handler, I have submitted a request for assistance or the forum support thread for Image Handler and have not had a response yet.

[mc12345678]

In your admin/includes/configure.php, towards the top are four uris... What are the prefixes for each? (http:, or https:)

[st.bobo]

I went and checked the URI's that you mentioned. When I did, I noticed the instructions near the top of the file: * WE RECOMMEND THAT YOU USE SSL PROTECTION FOR YOUR ENTIRE ADMIN: * To do that, make sure you use a "https:" URL for BOTH the HTTP_SERVER and HTTPS_SERVER entries:

I changed the HTTP_SERVER and HTTP_CATALOG_SERVER from the http entry to https (the HTTPS_SERVER was already showing https). A quick test, and it appears that this has fixed the problem. I am running some more tests to see if it is completely fixed. Thank you for helping me find what I had missed.

[mc12345678]

Welcome. Glad that a solution was found. Might I suggest answering your own problem on the IH4 forum so that others know what to do if they come across the same issue?

[st.bobo]

Welcome. Glad that a solution was found. Might I suggest answering your own problem on the IH4 forum so that others know what to do if they come across the same issue?

Will do, thanks for the suggestion.