Help making images secure in ssl mode

[DrByte]

I tried using your method but because I am using a shared SSL it would not work the way you suggested.

What do you mean by "it would not work the way you suggested"?
What do you mean by "it would not work"?

Using a relative path should work just fine, provided your settings in your configure.php file are correct (namely HTTP_SERVER, HTTPS_SERVER, DIR_WS_CATALOG, DIR_WS_HTTPS_CATALOG).
It's the same with product images: relative paths are used, because that way the SSL and non-SSL pages will still show them correctly.

[beasleybub]

What do you mean by "it would not work the way you suggested"?
What do you mean by "it would not work"?

Make your links to them "relative"
change these & any others

<img src="http://www.bodykitsonline.co.uk/includes/templates/custom/images/cart_top.jpg"
<img src="http://www.bodykitsonline.co.uk/includes/templates/custom/images/button_view.jpg"
<img src="http://www.bodykitsonline.co.uk/includes/templates/custom/images/button_checkout.jpg"

To:

<img src="includes/templates/custom/images/cart_top.jpg"
<img src="includes/templates/custom/images/button_view.jpg"
<img src="includes/templates/custom/images/button_checkout.jpg"

I made my image links relitave and they would not show up because of the SSL. My main page gets opened as (https:) after you either use the login box add on or the contest add on. I believe the problem arrises because I am using a shared SSL certificate which has a diferent URL than the store in the config file.

define('HTTP_SERVER', 'http://MyDomainName.com');
define('HTTPS_SERVER', 'https://Name.Server.com/NameServerUsername');

define('DIR_WS_CATALOG', '/CelebrityStore/');
define('DIR_WS_HTTPS_CATALOG', '/CelebrityStore/');

Sorry, But I do not want to post my servers information in a public forum.

[DrByte]

And what happens if you put this in your browser:

https://Name.Server.com/NameServerUs...your/image.jpg

[beasleybub]

And what happens if you put this in your browser:

https://Name.Server.com/NameServerUs...your/image.jpg

I tried doing that yesterday and I do see the image using that url.

That's the way I am using it now.

My questions here weren't how to get the image link to work but to ask if I am compromising my websites security by doing it that way. I was not sure if showing the world my actual nameserver URL and username was a risk.

Thanks

[DrByte]

I was not sure if showing the world my actual nameserver URL and username was a risk.

The information has to be disclosed in order for images and other content to be served. It's the same information as one would supply simply to draw the page, access an SSL URL, etc.
So, it's no more risk than providing a login link served on an SSL page.

[beasleybub]

Thank you drbyte.

I guessed as much but just wanted to be assured.

( I doubted myself a bit )

My apologies to kobra but I felt like he came off a bit abrasive earlier in the post. I know he was only trying to help.

On another note, kobra said that the main page was never opened via ssl. I am sure this is true with a bone stock zen-cart installation. For some reason both the login sidebox add on and the contest add on returns you to the main page after you login.

[DrByte]

It's normal to land on an ssl page after a login since the login action is an SSL activity.
But now we're way off topic again :)

[beasleybub]

I was reviewing some posts from months past and realized that I had been abrasive in some of my responses. To whom ever I may have offended. I would just like to apologize. Thanks everybody whom has helped me in the past.