Security prompts "your site contains non secure elements"

[jrb1512]

From when i click the log in link as a customer i get prompted with the security prompts stating that

"This page contains both secure and nonsecure items.

Do you want to display the nonsecure items?"

This happens throughout the checkout process, a number of visitors are going to quit at this point but i'm not sure how to resolve it. i have a shared ssl on the site from my host.


I'm not sure where to start ive had no response from my host on this as of yet.

[bmhayes]

The google analytics script is called from a non secure server. This is what is causing your secure/non secure errors.

[jrb1512]

oh dear, are there any free traffic monitoring programs that dont cause this?

i had to use the support threads to learn how to integrate it and now i'm going to have to remove it, oh well

[DrByte]

That indicates that somewhere in your templates you have hard-coded actual URL links to http://xxxxxxxxx instead of using relative paths to objects.

This can also happen if you have added banners with http:// links and not told them to skip display on SSL pages.

This can also happen if you have added click-tracking tools to your site via javascript, which link to http:// links somewhere.

You can identify most culprits by searching your browser's View Source for:

src="http://

[jrb1512]

That indicates that somewhere in your templates you have hard-coded actual URL links to http://xxxxxxxxx instead of using relative paths to objects.

This can also happen if you have added banners with http:// links and not told them to skip display on SSL pages.

This can also happen if you have added click-tracking tools to your site via javascript, which link to http:// links somewhere.

You can identify most culprits by searching your browser's View Source for:

src="http://

ive checked the banners their ok, ive just searched the page source for my homepage and its riddled with "http://" how can i resolve this any ideas?

[davik1000]

How does one "skip display on SSL pages"?

Thanks,
Vicki

[Fred!Head]

For hysterical/historical purposes, since I had this same problem, wanting to use Google Analytics and StatCounter.com code on my client's web pages, here's the solution:

http://www.zen-cart.com/forum/showthread.php?t=53809

Answer courtesy of getyourgameshere.com, thanks!

Tim

[davik1000]

For hysterical/historical purposes, since I had this same problem, wanting to use Google Analytics and StatCounter.com code on my client's web pages, here's the solution:

http://www.zen-cart.com/forum/showthread.php?t=53809

Answer courtesy of getyourgameshere.com, thanks!

Tim

Great! What file did you put this code in? Does it matter where at in the file? Did you have to change anything else in the file?

<?php
if ($request_type == 'NONSSL') {
//code goes here for non-ssl
} else {
//if its ssl, show me this stuff
}
?>

[Fred!Head]

For third party website analytics software code (usually javascript), it gets placed right above the close body, close html tags in tpl.footer.php file in the /common folder of your templates. In our case, it's in the default template folder.

As a heads up, for Google Analytics, there's also code you can put on your thank you/confirmation page for the sale that will synch up sales with activity up to where people buy, I believe. So you get sales metrics in addition to the non-SSL activity metrics. Just do some research at the GA site to find the code and settings needed. Along with AdWords reporting, that's what makes GA powerful as a free reporting tool. And I also use StatCounter.com to get the clickpath data.

Hope that's clear.

Tim