Zen Cart Logo
trapezoid-twopenny
Open navigation menu
Home Community Forum Plugins
Documentation
For Developers For Storeowners
Services Donate Get Started
Forums / General Questions / Firefox SSL security warning

Firefox SSL security warning

Results 1 to 20 of 98
27 Jan 2007, 22:04
#1
netbouy avatar

netbouy

New Zenner

Join Date:
Jan 2007
Posts:
18
Plugin Contributions:
0

Firefox SSL security warning

I have issues with the following security warning from firefox whenever I submit a form from Zen Cart over an https connection:

"Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.
I have searched around for an answer and it appears that this only happens when a form submits to a javascript. Apparently firefox doesn't know exactly what the javascript is going to do on the client side so it assumes that the javascript is submitting the form data to an unencrypted page... which is not actually the case.

I have searched the forums and have only found 1 entry for this problem here

Although this solution does fix the problem, it is a very laborious task for every form within Zen Cart (my entire store runs over an https connection).

Does everyone else have this problem with firefox as well or have I just set something up wrong in the cofiguration (SSL was activated after Zen Cart was initially setup)?

Maybe someone has found a simple solution to this issue?
27 Jan 2007, 22:25
#2
kim avatar

kim

Obaa-san

Join Date:
Jun 2003
Posts:
26,564
Plugin Contributions:
0

Re: Firefox SSL security warning

Your URL so it can be seen?
27 Jan 2007, 22:33
#3
netbouy avatar

netbouy

New Zenner

Join Date:
Jan 2007
Posts:
18
Plugin Contributions:
0

Re: Firefox SSL security warning

The URL is http://bkinky.co.nz/index.php

It is for a client and is an R18 site. It currently has an under-construction sign at http://bkinky.co.nz/index.html so you do need to put the index.php to get to it.

I have used .htaccess files to force the https connection.
27 Jan 2007, 22:41
#4
vger avatar

vger

Past Contributor

Join Date:
Nov 2004
Posts:
3,189
Plugin Contributions:
0

Re: Firefox SSL security warning

I think you may need to update your version of Firefox. I used to get this self-same issue with Firefox about a year ago, but it disappeared once the next upgrade came out. It seems it was to do with how Firefox handled https connections and not the websites themselves that caused the error message.

If you haven't upgraded Firefox in a while then try it and see if the problem goes away. If you have upgraded or it doesn't solve the problem then post back here.

Vger
27 Jan 2007, 22:58
#5
netbouy avatar

netbouy

New Zenner

Join Date:
Jan 2007
Posts:
18
Plugin Contributions:
0

Re: Firefox SSL security warning

I have Firefox 2 installed (2.0.0.1).

It is not just this website that I have encountered this issue with Firefox (happens with both Firefox 1 & 2) but I would like to remove it as it is not a nice warning for a customer to receive if they do not know why they are getting it.

You can try it yourself with your version of Firefox by using any form except the search side-box on the bottom left (I have fixed that with the info posted in the forums here ). Try the search box at the top of the page... that still has the problem.
27 Jan 2007, 23:27
#6
kim avatar

kim

Obaa-san

Join Date:
Jun 2003
Posts:
26,564
Plugin Contributions:
0

Re: Firefox SSL security warning

I have used .htaccess files to force the https connection.


Please undo this so we can *really* diagnose the problem.
28 Jan 2007, 00:13
#7
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
1

Re: Firefox SSL security warning

using firefox 2.001 I just went to your site,
went to the login page which is secure created a user still secure on success,
then I started hitting links
into and out of ssl and NO errors.
site could use a little speed though before you deliver it.
28 Jan 2007, 00:15
#8
netbouy avatar

netbouy

New Zenner

Join Date:
Jan 2007
Posts:
18
Plugin Contributions:
0

Re: Firefox SSL security warning

Ok... the force https part of the .htacess file has been edited out.

The SSL for checkout and login is still activated so now the problem will only occur when using the top search box during login or checkout - which I can fix easily enough.

I think the quickest solution to my problem is to just edit the sidebox/header forms so they do not throw the warning during the login or checkout and leave the rest of the site as standard http.

I am new to Zen Cart but I'm finding it really easy to work with and configure... great job everyone!!

Thanks a lot for your help.
28 Jan 2007, 00:20
#9
netbouy avatar

netbouy

New Zenner

Join Date:
Jan 2007
Posts:
18
Plugin Contributions:
0

Re: Firefox SSL security warning

Merlinpa1969:

using firefox 2.001 I just went to your site,
went to the login page which is secure created a user still secure on success,
then I started hitting links
into and out of ssl and NO errors.
site could use a little speed though before you deliver it.


Ha ha... Great timing... I just removed the force SSL which was causing the login error... the only place the error occurs now is in the top search while in an https connection (during login or checkout).
28 Jan 2007, 00:24
#10
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
1

Re: Firefox SSL security warning

Have you tried this using the stock classic template?
28 Jan 2007, 00:27
#11
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
1

Re: Firefox SSL security warning

I have seen this error and have verified it in several other sites

and just verified it with a brand new ZC 1.3.7

good catch
28 Jan 2007, 00:38
#12
netbouy avatar

netbouy

New Zenner

Join Date:
Jan 2007
Posts:
18
Plugin Contributions:
0

Re: Firefox SSL security warning

Just tried the site with the classic template and got the same same security warning as with my own template.

Great to hear I am not losing my mind... I was just off to test the same thing on a some sites in the showcase but you beat me to it...

Thanks for your help Merlinpa1969
28 Jan 2007, 01:07
#13
netbouy avatar

netbouy

New Zenner

Join Date:
Jan 2007
Posts:
18
Plugin Contributions:
0

Re: Firefox SSL security warning

This definitely appears to be an oversight so I have posted it in the bug reports here
28 Jan 2007, 03:05
#14
ajeh avatar

ajeh

Oba-san

Join Date:
Sep 2003
Posts:
62,757
Plugin Contributions:
1

Re: Firefox SSL security warning

This really isn't a bug but rather a need for preferrence ...

The submit forms can be set to go secure to secure or adapt a different approach and have the forms vanish from secure pages or change to a link to the non-secure page to prevent warnings of processing data between secure and non-secure pages ...
28 Jan 2007, 03:33
#15
netbouy avatar

netbouy

New Zenner

Join Date:
Jan 2007
Posts:
18
Plugin Contributions:
0

Re: Firefox SSL security warning

I understand what you are saying but due to the fact that this is a shopping cart and should be used with a secure connection on all production sites, it would make sense that the side boxes etc are able to determine which type of connection they are on and adjust themselves accordingly.

I have taken a look at a number of other ZC sites and they all do the same thing with Firefox and an https connection... generate a warning message. This tells me that this is actually a wide-spread issue and one that could be quite simply eliminated.

I am new to ZC so I'm not going to pretend I understand that much about it, but this does in fact appear to be a browser specific bug (or should we call it an abnormality?).

I agree that this is not a ZC bug, but more of a Firefox fix and it may be easier to correct this in ZC than Firefox.
28 Jan 2007, 04:17
#16
ajeh avatar

ajeh

Oba-san

Join Date:
Sep 2003
Posts:
62,757
Plugin Contributions:
1

Re: Firefox SSL security warning

I call it an undesireable feature ... :smartass:

Yes this can be altered to prevent the warnings ...

Change in the form the SSL/NONSSL to $request_type ...

NOTE: this will need to be tested on your site ...
28 Jan 2007, 04:46
#17
merlinpa1969 avatar

merlinpa1969

Totally Zenned

Join Date:
Mar 2004
Posts:
13,031
Plugin Contributions:
1

Re: Firefox SSL security warning

Ok Linda to keep this all in one thread,

I have acustomer that gets to checkout ( secure page ) they say self and self says Huh ,
I outta see if they also have that green doo dad

they hit the search box in the header and now they are NOT sure that they want to buy cause they see this neat security warning.

with your "fix" the customer dosnt even have the search box to loog for the doodad so now we have lost an add on sale......


See the way this is going.........
28 Jan 2007, 05:25
#18
netbouy avatar

netbouy

New Zenner

Join Date:
Jan 2007
Posts:
18
Plugin Contributions:
0

Re: Firefox SSL security warning

I completely agree with you if that was the situation.

I am not suggesting that anything be removed, just fixed.

This means the search box is available on the https login page,
The customer conducts their search without getting a warning message
The sale is made (hopefully).

However, scenario number 2...
The customer goes to login but thinks "hmmm, I wonder if they sell green blankets in the store?".
The search box is there so they type in "green blankets" but get a security warning message.
This makes them think "not too sure about this... why am I being warned? maybe I shouldn't shop here if the store is not secure?"

Get my drift... ?
28 Jan 2007, 05:45
#19
ajeh avatar

ajeh

Oba-san

Join Date:
Sep 2003
Posts:
62,757
Plugin Contributions:
1

Re: Firefox SSL security warning

Don't forget ... on fixing this you have to follow the full circle of files ...

Anyone that can be touched via a submit has to have the $request_type added ... plus it would not be a bad idea for a safety on the $request_type should it not set right because of your server settings ...

I have not found anything that does not pick this up right at the moment ... but again, another reason to hold off at this time ...

This is about 20+ files ...

All sideboxes with a form/submit

Product Listing and all dropdowns that might display ...

All of the product _info pages ...

Shopping Cart ...

etc. etc. etc.

Otherwise, you only half fix the secure warning ...

We know this is an undesireable feature ... and it will be addressed in a future release ...

Right now, it is too many template files to touch for a bugfix release ...
28 Jan 2007, 05:47
#20
ajeh avatar

ajeh

Oba-san

Join Date:
Sep 2003
Posts:
62,757
Plugin Contributions:
1

Re: Firefox SSL security warning

Merlinpa1969:

Ok Linda to keep this all in one thread,

I have acustomer that gets to checkout ( secure page ) they say self and self says Huh ,
I outta see if they also have that green doo dad

they hit the search box in the header and now they are NOT sure that they want to buy cause they see this neat security warning.

with your "fix" the customer dosnt even have the search box to loog for the doodad so now we have lost an add on sale......


See the way this is going.........


Again there are several ways to fix this ... adding the $request_type to all form/submits is the simple solution ...

Example tpl_search_header.php change to:
[PHP] $content .= zen_draw_form('quick_find_header', zen_href_link(FILENAME_ADVANCED_SEARCH_RESULT, '', $request_type, false), 'get');
[/PHP]

And don't forget the other 20+ files that also must be addressed ... :smile: