Connection Partially Encrypted - SSL Problem - Google Checkout installed

[DrByte]

I also see the same thing. If I read the posts right. For example, once logged in, on the main page (home), if I click on a manufacturer in that sidebox, I get a security warning from Firefox that the information I am sending is going over an unencrypted connection. If I type something in the search box and hit return, same thing.

I reviewed the code in tpl_search.php sidebox, and, sure enough, the draw form EXPLICITLY says NONSSL, meaning, guaranteed to get this behavior.

Perhaps this is slightly different than others are saying, but, this is not good! We do not want people to get those types of warnings, it scares people as 99% of them have no clue what it really means.

The same applies to other boxes, say manufacturers.

This IS a coding issue. At least for these examples.

So, I guess my question is why the code forces NONSSL and thus causes the warnings?

Slightly different issue than what Caveman raised initially.
However, same questions for you:
- what is the URL where this can be seen?
- what version of Zen Cart?
- what addons/contributions are installed?
- who's your host?

[sfatula]

Seeing a site (ours is wholesale) is not necessary. Open the code.

For example, tpl_search.php

$content .= zen_draw_form('quick_find', zen_href_link(FILENAME_ADVANCED_SEARCH_RESULT, '', 'NONSSL', false), 'get');

That one line is all that is needed. It forces NONSSL mode, meaning, on any page you do a search and the page itself was SSL (say, checkout_payment), you will generate a warning in a browser, depending on your notification settings. In firefox, by default, you get a security warning.

[sfatula]

Just so you all know, I found a thread on this where it is admitted it is a "problem" that will be addressed, perhaps via a preference.

http://www.zen-cart.com/forum/showthread.php?t=56885

As it turns out, I guess I more agree with Ajeh's position that it is an undesirable feature. I do like the pages being HTTP when logged in for the most part, as it is faster. Only affects a few possibilities such as search. And as she says, if you fix the search box for example, this in turns means you have to fix the product listing page, which then causes....

In the end, it means all the pages practically will be HTTPS.

[kobra]

sfatula,

Having thought about your issue for a while longer....This will prevent this from happening.

Normally, there ar ony 2 series of actions that switch to SSL - login and checkout.

You could create a login & checkout css that drops the columns so that they are not there during either of these functions as one logging in should log in and checking out is checking out time and the sideboxes are not necessary for these items.

Yeah a work around but maybe a good one

[sfatula]

Yes, I do see. Hopefully, whatever solution is decided upon by the Zen Cart Team is carefully thought out, which I am sure it always is.


I think I will simply live with it for now.