SSL Security Warning

Hi

I have a page on my site that needs to be held on a secure page (https). However I keep getting IEs security message about non secure and secure content on the same page. I do not get any such message from Firefox. However despite much scanning of the code I can't see anything on the page that might be causing the problem. Can you take a look at the sourcecode and let me know where you think the problem might be? I need to sort this out because it is super disconcerting for customers.....

https://www.christmas-cards-online.co.uk/index.php?main_page=page&id=21

I have the same issue on my login and checkout pages but I thought the above link was easier to gain access to.

Thanks

Gary

I view your website working normal.
I want to use SSL too.
just to learn ,
hoping someone can give some advice
:smile::smile::smile:

A customer just alerted me regarding this same issue.

I could complete a test transaction in Firefox with no problem, but when using IE at the login page I received a warning about both secure and non-secure pages then was booted for with IE reporting it couldn't open: https://www.broadwayfloral.com/index.php?main_page=login.

Applied the security patch yesterday.

Anyone have any ideas?

Thanks

GTrotter:

Hi

I have a page on my site that needs to be held on a secure page (https). However I keep getting IEs security message about non secure and secure content on the same page. I do not get any such message from Firefox. However despite much scanning of the code I can't see anything on the page that might be causing the problem. Can you take a look at the sourcecode and let me know where you think the problem might be? I need to sort this out because it is super disconcerting for customers.....

https://www.christmas-cards-online.co.uk/index.php?main_page=page&id=21

I have the same issue on my login and checkout pages but I thought the above link was easier to gain access to.

Thanks

Gary

After waiting over 10 minutes for the page to load (it eventually timed out, leaving half the images unloaded), I gave up...

Why does this need to be https ? This affects the page load time even more...

I also think you're trying to achieve too much here. Customers won't wait half a lifetime for this page to load. Consider using Gallery2 as an extension to the shop for the purpose of displaying such long lists of images. I'm sure gallery2 has the facility to alert you to a customer's needs as well.

pdxdoug:

A customer just alerted me regarding this same issue.

I could complete a test transaction in Firefox with no problem, but when using IE at the login page I received a warning about both secure and non-secure pages then was booted for with IE reporting it couldn't open: https://www.broadwayfloral.com/index.php?main_page=login.

Applied the security patch yesterday.

Anyone have any ideas?

Thanks

The problem is your SECURITY METRICS image. While its URL points to a secure site, the image is NOT SECURE. The path to the image is:
http://www.securitymetrics.com/images/sm_ccsafe_check3.gif

If you hard-coded this, change the
http://
to
https://

Thank you schoolboy!

I owe you a pint or two for this quick fix.

Gtrotter - Why do you want that page as SSL?

pdxdoug:

Thank you schoolboy!

I owe you a pint or two for this quick fix.

What was quick? ... took me 6 hours... and at $50 / hour that's quite a few beers ! :laugh:

(Glad to have helped :bigups: )

Hi

Thanks for your comments.

Yes- load time is bad (I will need to find a better solution).

SSL - I want this to be SSL because the customer is passing address details to the site (which I think should be done securely).

Anyone got any idea why I get this warning in IE?

Thanks

Gary

Have you considered using Product-Document product type to achieve this?

http://www.zen-cart.com/forum/showthread.php?t=126636

Hi

Sorry to drag everyone back to my original question but does anyone else get this warning in IE and if so, any idea what is causing it?

Gary

I get the warning in IE ...

Peek in your stylesheet for:

@font-face {

font-family: BaskerVilleBT;

font-style:  normal;

font-weight: normal;

src: url(<http://www.christmas-cards-online.co.uk/BASKERV0.eot%29;>

}

Is that doing it to you? It is not relative ... it is not secure ... not really sure what it is ... :eek: