Page 3 of 3 FirstFirst 123
Results 21 to 22 of 22
  1. #21
    Join Date
    Sep 2003
    Location
    Ohio
    Posts
    69,402
    Plugin Contributions
    6

    Default Re: This page contains both secure and nonsecure items

    Because the test that sets the value of is the page secure or not cannot detect it so it says set the:
    PHP Code:
    <base href="http://www.poker-dude.com/" /> 
    This means ... that on the secure page the code that is 2000 miles long to do this detection cannot ...

    If you could PM an FTP access and username and password ...
    Linda McGrath
    If you have to think ... you haven't been zenned ...

    Did YOU buy the Zen Cart Team a cup of coffee and a donut today? Just click here to support the Zen Cart Team!!

    Are you using the latest? Perhaps you've a problem that's fixed in the latest version: [Upgrade today!]
    Officially PayPal-Certified! Just click here

    Try our Zen Cart Recommended Services - Hosting, Payment and more ...
    Signup for our Announcements Forums to stay up to date on important changes and updates!

  2. #22
    Join Date
    Jan 2004
    Posts
    66,443
    Plugin Contributions
    279

    Default Re: This page contains both secure and nonsecure items

    Quote Originally Posted by Ajeh View Post
    Ask Network Solution why this code cannot detect if their secure pages are secure:
    PHP Code:
    <?php
    $request_type 
    = ((isset($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) == 'on') || 
    (isset(
    $_SERVER['HTTPS']) && $_SERVER['HTTPS'] == '1') || 
    (isset(
    $_SERVER['HTTP_X_FORWARDED_BY']) && strstr(strtoupper($_SERVER['HTTP_X_FORWARDED_BY']),'SSL')) || 
    (isset(
    $_SERVER['HTTP_X_FORWARDED_HOST']) && strstr(strtoupper($_SERVER['HTTP_X_FORWARDED_HOST']),'SSL')) || 
    (isset(
    $_SERVER['SCRIPT_URI']) && strtolower(substr($_SERVER['SCRIPT_URI'], 06)) == 'https:') || 
    (isset(
    $_SERVER['SERVER_PORT']) && $_SERVER['SERVER_PORT'] == '443' ) ) 
    'SSL' 'NONSSL';
    echo 
    'I SEE ' $request_type;
    ?>
    Quote Originally Posted by superprg View Post
    Ajeh, can you tell me why do I get images as http when I click on the lock in FireFox and click on media tab..Is that not the problem?
    Quote Originally Posted by Ajeh View Post
    Because the test that sets the value of is the page secure or not cannot detect it so it says set the:
    PHP Code:
    <base href="http://www.poker-dude.com/" /> 
    This means ... that on the secure page the code that is 2000 miles long to do this detection cannot ...
    The code Ajeh posted earlier is what Zen Cart does to detect whether a given page is being served in SSL mode or not. If it is, then Zen Cart sets the base-href value to be https instead of http

    However, the Network Solutions configuration fails all of those tests.
    Specifically:
    a) they do not set SERVER[HTTPS] to "on" or "1" -- they leave it blank
    b) they strip SERVER[SCRIPT_URI] so that it shows as http://blah instead of https://blah

    (SCRIPT_URI typically translates the same as the URL in the browser address bar, unless the webserver is configured to alter it ... which appears to be what netsol is doing)

    In comparing phpinfo and all known $_SERVER output from both their HTTP and HTTPS links to the same page, there are no identifiable differences between the two, and thus there appears to be no way to determine concretely that the page is in fact being served as SSL.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

 

 
Page 3 of 3 FirstFirst 123

Similar Threads

  1. This page contains both secure and non-secure items?
    By doubletiger in forum General Questions
    Replies: 2
    Last Post: 11 Sep 2010, 01:16 PM
  2. HCL (Help Center Live) - Page contains both secure and nonsecure items
    By Ruthless in forum All Other Contributions/Addons
    Replies: 4
    Last Post: 5 Mar 2009, 07:41 AM
  3. Replies: 3
    Last Post: 8 Oct 2008, 01:53 AM
  4. Help with "page contains both secure and nonsecure items"
    By bpais in forum General Questions
    Replies: 4
    Last Post: 21 Jan 2008, 03:32 AM
  5. Replies: 10
    Last Post: 18 Apr 2007, 10:29 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg