Results 1 to 5 of 5
  1. #1
    Join Date
    Jul 2007
    Posts
    24
    Plugin Contributions
    0

    red flag security alert message leaving ssl page

    Hey all,

    We have certain pages where an alert message will pop up if someone navigates from an https page to an http page

    Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.

    Are you sure you want to continue sending this information?
    What's the best way to fix this?

    I had one person suggest to me to enforce SSL on all store pages. What do you think of this? If it's a good idea how do I implement?

    Thanks!

  2. #2
    Join Date
    Jan 2004
    Posts
    66,447
    Plugin Contributions
    81

    Default Re: security alert message leaving ssl page

    Which pages are experiencing that error message?
    That should only occur if the customer is clicking a submit button on a form, and the destination page for that form is a non-SSL page.


    No, running your entire site in SSL is not recommended in most cases, as it slows everything down.

    Zen Cart in its normal form doesn't encounter SSL warnings. The warnings typically only appear when the normal flow partially altered but not done properly/completely for all links to pages affected.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  3. #3
    Join Date
    Jul 2007
    Posts
    24
    Plugin Contributions
    0

    Default Re: security alert message leaving ssl page

    Dr. Byte

    Thanks for the reply. That's exactly what's happening in fact. It is from the cart page

    /index.php?main_page=shopping_cart

    And we have a submit button that is the go to checkout button. That is one place that this error shows up. (There may be others.)

    How do I fix this instance? Hopefully I can replicate the fix to other places if we find it.

    Thanks

  4. #4
    Join Date
    Jun 2003
    Posts
    33,721
    Plugin Contributions
    0

    Default Re: security alert message leaving ssl page

    The URL? Have you altered the shopping cart page?
    Please do not PM for support issues: a private solution doesn't benefit the community.

    Be careful with unsolicited advice via email or PM - Make sure the person you are talking to is a reliable source.

  5. #5
    Join Date
    Jan 2004
    Posts
    66,447
    Plugin Contributions
    81

    Default Re: security alert message leaving ssl page

    Quote Originally Posted by gl330k View Post
    It is from the cart page

    /index.php?main_page=shopping_cart

    And we have a submit button that is the go to checkout button. That is one place that this error shows up.
    Um, Zen Cart normally secures the Checkout pages and NOT the shopping-cart page.

    It sounds like you've made some significant changes to the way Zen Cart normally works.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

 

 

Similar Threads

  1. Help with SSL "Security Check" Message...
    By ToyPallet in forum General Questions
    Replies: 2
    Last Post: 11 Sep 2009, 04:44 AM
  2. v1.3.5 Security Alert
    By wilt in forum Zen Cart Release Announcements
    Replies: 1
    Last Post: 2 Oct 2006, 05:51 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg