Getting Rid Of Security Warning

[madk]

When a user logs into my cart and then is forwarded back to the index I get the popup that prompts the user if they want to display both secure and non-secure items.

I just went through and fixed all my links and images that were hard coded with http which I thought would fix this error. But alas it still pops up.

Viewing my source I noticed that my search box still contains http instead of https. Would this cause the warning?

			<span class="blue">Site Search:</span>            <? // SEARCH FORM ?>
			<?=zen_draw_form('quick_find', zen_href_link(FILENAME_ADVANCED_SEARCH_RESULT, '', 'NONSSL', false), 'get')?>
			<?=zen_draw_hidden_field('main_page',FILENAME_ADVANCED_SEARCH_RESULT)?>
			<?=zen_draw_hidden_field('search_in_description', '1')?>            
			<?=zen_draw_input_field('keyword', '', 'class=form_search')?>            
			<input name="Input" type="image" src="<?=DIR_WS_TEMPLATE?>images/go.jpg" class="abs">
			</form>

I do notice the nonssl flag there but I'm not exactly sure how this works? Any help would be greatly appreciated.

[ajcannon]

When a user logs into my cart and then is forwarded back to the index I get the popup that prompts the user if they want to display both secure and non-secure items.

I just went through and fixed all my links and images that were hard coded with http which I thought would fix this error. But alas it still pops up.

Viewing my source I noticed that my search box still contains http instead of https. Would this cause the warning?

			<span class="blue">Site Search:</span>            <? // SEARCH FORM ?>
			<?=zen_draw_form('quick_find', zen_href_link(FILENAME_ADVANCED_SEARCH_RESULT, '', 'NONSSL', false), 'get')?>
			<?=zen_draw_hidden_field('main_page',FILENAME_ADVANCED_SEARCH_RESULT)?>
			<?=zen_draw_hidden_field('search_in_description', '1')?>            
			<?=zen_draw_input_field('keyword', '', 'class=form_search')?>            
			<input name="Input" type="image" src="<?=DIR_WS_TEMPLATE?>images/go.jpg" class="abs">
			</form>

I do notice the nonssl flag there but I'm not exactly sure how this works? Any help would be greatly appreciated.

What is your website address? Also, do you have SSL enabled on your site?

[madk]

The site is www.beadhaven.com and yes I have SSL enabled.

[DrByte]

1. Your Login page does not show the security padlock until after the customer submits their information. Many will not like that.

2. Your google analytics code is causing your security warning. References to http:// content in a "src=" parameter while on a https:// page.

<script src="http://www.google-analytics.com/urchin.js" type="text/javascript">