SSL Security Warning IE8

Hello,

In IE8, I receive an SSL Security Warning: This webpage contains contet that will not be delivered using a secure https. I get the error every time "My Account", "Logout", or "Checkout" is clicked, and also EVERY step through the checkout process.

I have been researching for most of the day and have messed with the configure.php files but can't seem to find the source of the messages. I have check my images to make sure they are linked as Https://, still no luck.

Having to click ok to an SSL warning and continue 6 times before they can pay isn't what I want for my customers.

I host with hostmonster and have use their ssl through comodo.

TacticalCombatGear.com

Thank you in advance!

Took me a few minutes to see the forest for the trees, but it's your background image that's causing the problem. Try changing the path in the 'body' section of the stylesheet to a relative path (../images/condor_bg.jpg).

And perhaps this

a href="javascript:void(window.open('http://checkout.google.com/seller/what_is_google_checkout.html

Opening an unsecured popup.

~Melanie

stevesh:

Took me a few minutes to see the forest for the trees, but it's your background image that's causing the problem. Try changing the path in the 'body' section of the stylesheet to a relative path (../images/condor_bg.jpg).

Thank you sir! this was the problem! This was one of the first changes I made to my style sheet in the learning process. Now I know not to use full links while adding images to any files!.

Mprough I appreciate your info as well!

stevesh:

Took me a few minutes to see the forest for the trees, but it's your background image that's causing the problem. Try changing the path in the 'body' section of the stylesheet to a relative path (../images/condor_bg.jpg).

Hi stevesh,

I am getting the same issue on this site: http://equinespeedskip.co.uk on the register / log in pages could you advise?

Regards
Alan

riddler24a:

I am getting the same issue on this site: http://equinespeedskip.co.uk on the register / log in pages could you advise?It looks as though your internal site content, in particular images and stylesheets is all being loaded over a non-secured line, triggering the warning about mixing secured and unsecured data.

This could be that you have your HTTPS_SERVER setting in your configure.php file set to an http:// address.

Hi, thanks for the quick reply

// Define the webserver and path parameters
  // HTTP_SERVER is your Main webserver: eg, http://www.yourdomain.com
  // HTTPS_SERVER is your Secure webserver: eg, https://www.yourdomain.com
  define('HTTP_SERVER', 'http://equinespeedskip.co.uk');
  //define('HTTPS_SERVER', 'https://secure.equinespeedskip.co.uk');
  define('HTTPS_SERVER', 'https://equinespeedskip.co.uk'); 

  // Use secure webserver for checkout procedure?
  define('ENABLE_SSL', 'true');

// NOTE: be sure to leave the trailing '/' at the end of these lines if you make changes!
// * DIR_WS_* = Webserver directories (virtual/URL)
  // these paths are relative to top of your webspace ... (ie: under the public_html or httpdocs folder)
  define('DIR_WS_CATALOG', '/');
  define('DIR_WS_HTTPS_CATALOG', '/');

  define('DIR_WS_IMAGES', 'images/');
```is how the configure.php is set up at the moment, does all that look correct?

Alan

That does look correct and provided it's the one actually on your server (suprising how often the one somebody's storing locally, is different to what's actually on the server) and there's not a file over-riding it in your includes/local folder, then that should work.

If it is the operational file, then you would need to look at whether you are using any mods that have over-written your common/html_includes.php file causing this line> <base href="<?php echo (($request_type == 'SSL') ? HTTPS_SERVER . DIR_WS_HTTPS_CATALOG : HTTP_SERVER . DIR_WS_CATALOG ); ?>" />to be lost or malfunction.

But I'm afraid that I'll be bowing out of helping on this one. Site owners should change the site'scopyright statement, and are perfectly entitled to remove the "powered by statement". But I have a big objection to sites that claim to be powered by the owners or their designers or developers when they're actually powered by Zen Cart. This seems to me to be very disrespectful of the hard work put in by the Zen Cart team, and I wish I'd spotted that on your site before I offered help.

kuroi:

But I'm afraid that I'll be bowing out of helping on this one. Site owners should change the site'scopyright statement, and are perfectly entitled to remove the "powered by statement". But I have a big objection to sites that claim to be powered by the owners or their designers or developers when they're actually powered by Zen Cart. This seems to me to be very disrespectful of the hard work put in by the Zen Cart team, and I wish I'd spotted that on your site before I offered help.

Hi kuroi,

no offence intended here, I have picked up this project of a 3rd party and totally agree that all sites Zen cart / Joomla etc should have the "powered by statement".

I have worked on plenty of sites that powered by statement left on and this is something I personally encourage , but if a client request it be removed then is that not their right?

To remove your help just because of a personal preference is totally up to you if not a little mean sprinted, but that is only my opinion.

But to keep everybody happy and not to make anybody mad and to say thank you for everyone's support I have put back in the Zen cart text

Regards
Alan

In your includes/templates/your_template/common/

switch out the html_header.php. Since the configure looks ok, that generally mean this file is broken.

It switches to ssl, but not correctly, the base href is still http and the login page for example loads in http if you try.

~Melanie

riddler24a:

no offence intended here, I have picked up this project of a 3rd party and totally agree that all sites Zen cart / Joomla etc should have the "powered by statement".

I have worked on plenty of sites that powered by statement left on and this is something I personally encourage , but if a client request it be removed then is that not their right?

To remove your help just because of a personal preference is totally up to you if not a little mean sprinted, but that is only my opinion.

But to keep everybody happy and not to make anybody mad and to say thank you for everyone's support I have put back in the Zen cart textI recommend that you re-read what I actually wrote. I didn't say that it was necessary to credit Zen Cart, that's perferable, but not obligatory. I objected to the way the site owners were taking credit that is due to Zen Cart.

If you think that it's mean-spirited of me not to donate free assistance to a site was not only not crediting those who'd done most of the work, but was taking that credit for itself, then I'll happily accept that label (though I think you've got it backwards).

mprough:

In your includes/templates/your_template/common/

switch out the html_header.php. Since the configure looks ok, that generally mean this file is broken.

It switches to ssl, but not correctly, the base href is still http and the login page for example loads in http if you try.

~Melanie

Hi ~Melanie,

how do you mean switch out the html_header.php?

Alan

Rename or back it up and replace it with a fresh Zen Cart default one.

~Melanie

Thanks, will give that a go.

Alan

I have the same problem IE warning pops up on login and all other secure pages.....In IE8, I receive an SSL Security Warning: This webpage contains contet that will not be delivered using a secure https. I get the error every time "My Account", "Logout", or "Checkout" is clicked, and also EVERY step through the checkout process.

Joe,

That usually means that you have links on those pages that are prefixed http:// rather than https:// and are there being pulled in through a link that is not secured.

I'm suspecting that you're not talking about the link in your sig as that doesn't have a valid security certificate. Instead it would seem to share a hosting account with what I suspect is intended to be your main URL, natas .... production .... com, but which doesn't seem to have a site yet.

So in the absence of a site to look at, it's not possible to be more specific as what is causing the problem.

i have reloaded html_header.php file. but there is no effect of it. can you suggest another solution?
thanx

In order to help we need to know the exact error and having a URL to your site would also help.

I noticed today that my website is also doing this. Im pretty sure it never use to and i havnt really added anything additional to the sideboxes etc.

I disabled sideboxes etc to no avail.

Site: t r u w a t e r . c o m . a u

You will be looking for an absolutely coded element in a stylesheet or javascript file.

Yours is not in the page.

~Melanie