Page 1 of 4 123 ... LastLast
Results 1 to 10 of 39
  1. #1
    Join Date
    Jan 2008
    Posts
    40
    Plugin Contributions
    0

    application error Base HREF https issues

    Hi all..

    Been searching the forums for days trying to find an answer.. but with no joy

    I'm getting the "This page contains both secure and nonsecure items... " warning on IE (and similar in FF) I've seen several people say hard coded HTTP: links are the issue, but I can see any on my site. The only thing I'm thinking it could be is the <base href=http in my code.

    HOW do you change this to <base href=https ? Or is this not the problem?

    My website: www.sourcetech.co.uk

    Please help!!

    Mike

  2. #2
    Join Date
    Mar 2008
    Location
    Cape Town & London (depends on the season)
    Posts
    2,975
    Plugin Contributions
    0

    Default Re: Base HREF https issues

    What values are you putting in your configure.php files for:

    PHP Code:
    define('HTTP_SERVER''http://xxxxxxxxxxxxxxxxxxxx');
    define('HTTPS_SERVER''https://xxxxxxxxxxxxxxxxxxxx'); 

  3. #3
    Join Date
    Jan 2008
    Posts
    40
    Plugin Contributions
    0

    Default Re: Base HREF https issues

    Hi fairestcape, both my configure files say the following:

    define('HTTP_SERVER', 'http://www.sourcetech.co.uk');
    define('HTTPS_SERVER', 'https://www.sourcetech.co.uk');
    That seems right. I just tried adding "/shop" onto the end, just on the off-chance that this worked.. and it managed to kill the entire site! Not such a good idea then!

  4. #4
    Join Date
    Mar 2008
    Location
    Cape Town & London (depends on the season)
    Posts
    2,975
    Plugin Contributions
    0

    Default Re: Base HREF https issues

    These paths to http and https look quite correct.

    (Is your SSL cert for www.sourcetech.co.uk, or just sourcetech.co.uk?)

    HTTPS is invoked by zencart only when necessary - ie: when sensitive data is being transmitted. (Names, Addresses, Checkout process).

    Most of the time, it operates in http mode.

    If you are getting "Insecure elements" warnings when logging in, or going through checkout, then this is generally a result of a http:// URL embedded somewhere in the code calling https: (It could be in a define page, or a template file.

    When the message appears, say "No, don't display insecure items", then look at the output to see what's missing... That's your clue as to how to resolve it.

  5. #5
    Join Date
    Nov 2007
    Location
    Woodbine, Georgia, United States
    Posts
    3,859
    Plugin Contributions
    61

    Default Re: Base HREF https issues

    Here are the insecure items...

    Code:
    <script language="javascript" type="text/javascript"><!--
    function session_win() {
      window.open("http://www.sourcetech.co.uk/shop/index.php?main_page=info_shopping_cart","info_shopping_cart","height=460,width=430,toolbar=no,statusbar=no,scrollbars=yes").focus();
    }
    //--></script>
    Code:
    <script type="text/javascript" src="http://download.skype.com/share/skypebuttons/js/skypeCheck.js">
    Code:
    <img src="http://mystatus.skype.com/balloon/mike.r.backhouse" style="border: none;" width="140" height="56" alt="My status" />
    Code:
    <a onClick="window.open('http://www.shopmania.co.uk/?m=139'); return false;" alt="Visit Sourcetech.co.uk on ShopMania" target="_blank" href="http://www.shopmania.co.uk"><img border="0" title="Visit Sourcetech.co.uk on ShopMania" src="http://www.shopmania.co.uk/img/cert/shopmania-store-uk.gif" alt="" /></a></p>
                <p>
    ~Melanie
    PRO-Webs, Inc. :: Recent Zen Cart Projects :: Zen Cart SEO 12 Steps to Success
    **I answer questions in the forum, private messages are NOT answered. You are welcome to contact us via our website for professional engagements.

  6. #6
    Join Date
    Jan 2008
    Posts
    40
    Plugin Contributions
    0

    Default Re: Base HREF https issues

    Thank you for replies, really blows me away when people take the time to help.

    fairestcape, I'll check our SSL certificate, my MD who actually bought it, is under the impression that it IS minus the www, so that could well be the problem..

    mprough, I noticed the same things when checking the source code. So I've now switched off the skype sidebox and the box that contained the shopmania link. Cant for the life of me figure out where that bit of javascript's coming from:

    Code:
    <script language="javascript" type="text/javascript"><!--
    function session_win() {
      window.open("http://www.sourcetech.co.uk/shop/index.php?main_page=info_shopping_cart","info_shopping_cart","height=460,width=430,toolbar=no,statusbar=no,scrollbars=yes").focus();
    }
    //--></script>
    So I'll take a better look at that asap.

    Question.. if there are ANY hard coded links on the site, even to external sites, then this will cause issues with HTTPS? How do I get round linking to say http://www.google.com, when there isnt an HTTPS alternative?

  7. #7
    Join Date
    Nov 2007
    Location
    Woodbine, Georgia, United States
    Posts
    3,859
    Plugin Contributions
    61

    Default Re: Base HREF https issues

    Internal links can be absolute... External links must be to secured pages.

    If your www/non www was incorrect on the SSL it would display an error and not load the page at all....

    ~Melanie
    PRO-Webs, Inc. :: Recent Zen Cart Projects :: Zen Cart SEO 12 Steps to Success
    **I answer questions in the forum, private messages are NOT answered. You are welcome to contact us via our website for professional engagements.

  8. #8
    Join Date
    Jan 2004
    Posts
    66,349
    Blog Entries
    7
    Plugin Contributions
    271

    Default Re: Base HREF https issues

    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

  9. #9
    Join Date
    Apr 2006
    Location
    West Salem, IL
    Posts
    2,724
    Plugin Contributions
    0

    Default Re: Base HREF https issues

    How deep does the rabbit hole go?....when on the login page, which should be secure I see a base href of
    Code:
    <base href="http://www.sourcetech.co.uk/shop/" />
    when ti should be
    Code:
    <base href="https://www.sourcetech.co.uk/shop/" />
    That is causing all of the stylesheets and images on the page to be called unsecure on the secure page.
    Mike
    GeekHost - Zen Cart Certified & PCI Compliant Hosting
    The Zen Cart Forum...Better than a monitor covered with post-it notes!

  10. #10
    Join Date
    Jan 2004
    Posts
    66,349
    Blog Entries
    7
    Plugin Contributions
    271

    Default Re: Base HREF https issues

    Who is the hosting company?
    A few hosts are known to be unable to support SSL using conventional methods.
    .

    Zen Cart - putting the dream of business ownership within reach of anyone!
    Donate to: DrByte directly or to the Zen Cart team as a whole

    Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
    Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

 

 
Page 1 of 4 123 ... LastLast

Similar Threads

  1. Another Base HREF https issue
    By blarney in forum General Questions
    Replies: 7
    Last Post: 27 Oct 2010, 09:03 PM
  2. Replies: 12
    Last Post: 22 Sep 2010, 04:43 PM
  3. base href problem
    By cricles in forum Upgrading from 1.3.x to 1.3.9
    Replies: 3
    Last Post: 20 Jul 2010, 06:34 AM
  4. https error relating to base href SSL
    By little dog in forum Basic Configuration
    Replies: 3
    Last Post: 18 Dec 2007, 08:12 AM

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
disjunctive-egg
Zen-Cart, Internet Selling Services, Klamath Falls, OR