Unsecure items in SSL pages

This website im doing has just had the SSL installed so i go into my two configure files and turn on HTTPS

i know i havent used hard coded links as i made a point not to but my base href is referencing HTTP on my secure pages i checked the relevant files and they seem to be fine with..

the site can be found @ https://www.joshlingerie.com

any help would be appreciated

Talk to your host... The problem appears to be with your stylesheet.

Thanks for the reply

i have checked the stylesheets none have hard coded urls or any problems i can see ?

Quedex:

This website im doing has just had the SSL installed so i go into my two configure files and turn on HTTPS

i know i havent used hard coded links as i made a point not to but my base href is referencing HTTP on my secure pages
Then your host has configured the SSL incorrectly in the server settings.

Thats what im thinking as there is no way to set the base href except from server side right ?

the base href is referencing http so of course all the relative paths will be from http and not https and thats the problem im having i'll email them again if that doesnt work i'll ring them :D

thanks guys

Zen Cart calculates the correct base href based on whether your server is properly reporting that it's in SSL mode.
There are a few oddball hosting companies who can't seem to figure out how to do that properly. Hopefully yours isn't one of them.

i did see Ajeh's post with the....

php test i put it on my server and https://www.joshlingerie.com/test.php comes back as i see NONSSL

can i use this to hassle my hosting company ?

many thanks

You can try. Good luck.

thanks for all the help guys i know a little php but server configurations are beyond me without you guys i'd be lost

running that script should report back as i see SSL then if all is correct is that right? i just need a bit of ammo if the hosts say it's my problem AGAIN !

Yes .

When a host makes errors such as this, and then tries to tell you that it's something YOU are doing, then it's time to find a better host.

Update* I still have to run the site fully behind the SSL as i still get " i see non ssl" from the above script

my server guys are telling me this....

When you access an atlas site over SSL, we set the variable X-Forwarded-SSL to 1 and SSL is set to 1

i have no idea wot this means any info on this would be appreciated !

many thanks

You could try updating the /includes/init_includes/init_file_db.php file by adding 2 extra lines, as shown below:```
$request_type = (((isset($_SERVER['HTTPS']) && (strtolower($_SERVER['HTTPS']) == 'on' || $_SERVER['HTTPS'] == '1'))) ||
(isset($_SERVER['HTTP_X_FORWARDED_BY']) && strpos(strtoupper($_SERVER['HTTP_X_FORWARDED_BY']), 'SSL') !== false) ||
(isset($_SERVER['HTTP_X_FORWARDED_HOST']) && (strpos(strtoupper($_SERVER['HTTP_X_FORWARDED_HOST']), 'SSL') !== false || strpos(strtoupper($_SERVER['HTTP_X_FORWARDED_HOST']), str_replace('https://', '', HTTPS_SERVER)) !== false)) ||
(isset($_SERVER['SCRIPT_URI']) && strtolower(substr($_SERVER['SCRIPT_URI'], 0, 6)) == 'https:') ||
[B] (isset($_SERVER['HTTP_X_FORWARDED_SSL']) && ($_SERVER['HTTP_X_FORWARDED_SSL'] == '1' || strtolower($_SERVER['HTTP_X_FORWARDED_SSL']) == 'on')) ||
(isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && (strtolower($_SERVER['HTTP_X_FORWARDED_PROTO']) == 'ssl' || strtolower($_SERVER['HTTP_X_FORWARDED_PROTO']) == 'https')) ||[/B]
(isset($_SERVER['HTTP_SSLSESSIONID']) && $_SERVER['HTTP_SSLSESSIONID'] != '') ||
(isset($_SERVER['SERVER_PORT']) && $_SERVER['SERVER_PORT'] == '443')) ? 'SSL' : 'NONSSL';

Info for Network Solutions clients. Network Solutions will not allow the php script in Zen-Cart to detect SSL called pages. Here is a quote from a Network Solutions staff member on the NS user forums. Yet another reason to not use Network Solutions to host your Zen-Cart site.

Our proxy SSL doesn't allow server-side variables to detect HTTPS (secure). All server-side coding will always detect HTTP (non-secure), and for programs that attempt to redirect non-secure connections (http://) to a secure connection (https://) will result in an infinite loop and server error after 30 seconds.

The only ways around this is to
assume the connection is secure by making all the links to the sensitive pages https, or

use a client-side program (like javascript) to detect if it's secure and redirect if it's not. The coding below will do just that. Just modify it to redirect to the correct secure domain and add it into the HTML of any sensitive pages.

http://forums.networksolutions.com/index.php?s=&showtopic=6418&view=findpost&p=27418

vinewbs - are you saying you are hosted on NetSol?

Yes, this site is on NetSol, not by choice, though. My client's non-ZenCart site was on NetSol prior to my converting it to a Zen-Cart. I have been discovering the NetSol issues since launching the site a week ago. Wish I had known about all the issues before; I would have recommended my client change hosts before we launched.

@vinewebs; did you find a solutions to your problem?

i'm trying to setup the SSL from Network Solutions hosted on HostUpOn, but they both say that everything is setup right, and that the problem is with zencart, does that make sense to anyone?