This is a non-secure form. This form will be sent in a way that is not secure.

HELP please. SSL function issues.

The CONTACT form found outside the Zen files does work but a sign comes up when SEND is clicked. It says. "This is a non-secure form. This form will be sent in a way that is not secure. Are you sure you want to send it?". However the form does SEND and it arrives.

Part 2 problem inside Zen Cart. Can't get past the page:
/index.php?main_page=products_all
Quantity desired to purchase is Added in the field then "add selected products to cart" button is clicked and a sign appears,"This is a non-secure form. This form will be sent in a way that is not secure. Are you sure you want to send it?". HOWEVER it will not permit me to go beyond this page. No matter which choice I make - CANCEL or SEND. I can not go beyond this page.

My host said the issue in inside Zen Cart. I'm stumped because I did all of the following Zen instructions and read all the posts in this thread.

I'm running Zen v1.3.9h My host installed a dedicated SSL cert on my site and I followed the instructions in the tutorial mentioned already here to enable it https://www.zen-cart.com/tutorials/index.php?article=14.
I selected the PCI compliant choices. I cleared the browsers cache and cookies in both Safari and Firefox.

All my URL's are showing as https:// and I can add the www. in the addresses and still get to the page. I don't offer PayPal. All images come from the Zen Files on the server.
Following are the code changes I made to admin/includes/configure.php :

define('HTTP_SERVER', 'https://naturalshave.com');
define('HTTPS_SERVER', 'https://naturalshave.com');
define('HTTP_CATALOG_SERVER', 'https://naturalshave.com');
define('HTTPS_CATALOG_SERVER', 'https://naturalshave.com');

define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');

Following are the code changes I made to includes/configure.php

define('HTTP_SERVER', 'http://naturalshave.com'); (I tried a version inserting https: it failed)
define('HTTPS_SERVER', 'https://naturalshave.com');

// Use secure webserver for checkout procedure?
define('ENABLE_SSL', 'true');

define('DIR_WS_CATALOG', '/store/');
define('DIR_WS_HTTPS_CATALOG', '/store/');

The Zen Cart configure.php settings you posted above are just fine.

However, you have some weird redirecting happening on your site, presumably with stuff you've added to a .htaccess file in the root of your site. And/or improperly configured SSL settings in your domain setup.

For example, visiting http:// naturalshave.com does an immediate redirect to https:// naturalshave.com ... and that's completely unrelated to Zen Cart ... but could certainly cause the symptoms you see while in the Zen Cart section of your site.

You need to resolve those unconventional and unnecessary redirects by working with your hosting company.

That will then also fix the problem on your non-ZC contact page.

Wow. You were right on point. The problems were all solved by the Host. Had you not recognized the https redirect the host would not have found the problem. Many many thanks!

Coffee coming up!

Odd after all was working fine for 7 months the same problem started again. Hosting Co. says they changed nothing. Neither did I. See first post in this thread:

"The CONTACT form found outside the Zen files does work but a sign comes up when SEND is clicked. It says. "This is a non-secure form. This form will be sent in a way that is not secure. Are you sure you want to send it?". However the form does SEND and it arrives.

Part 2 problem inside Zen Cart. Can't get past the page:
/index.php?main_page=products_all
Quantity desired to purchase is Added in the field then "add selected products to cart" button is clicked and a sign appears,"This is a non-secure form. This form will be sent in a way that is not secure. Are you sure you want to send it?". HOWEVER it will not permit me to go beyond this page. No matter which choice I make - CANCEL or SEND. I can not go beyond this page."

Followed same solution as before. Zen code is correct. See first post in this thread.

.htaccess was altered to work by BlueHost the first time and now BlueHost says it's my problem.

Here's the code currently in the .htaccess
# Use PHP5 Single php.ini as default
AddHandler application/x-httpd-php5s .php
RewriteEngine On
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://mydomain.com/$1 [R,L]
Options -Indexes
Header unset ETag
FileETag None
Header unset ETag
FileETag None

I tried looking at "View Source" while on the Zen page https://mydomain.com/store/index.php?main_page=products_all

This is what I saw and the BlueHost Tech said this Zen code is the problem. Although I have no idea how to find this code so I can try to change it. He said the bits displayed in red below should be changed to "https"
<form name="sorter_form" action="http://mydomain.com/store/index.php?main_page=products_all" method="get"><input type="hidden" name="main_page" value="products_all" />
<select name="disp_order" onchange="this.form.submit();" id="disp-order-sorter">

<option value="1" selected="selected">Product Name</option>

<option value="2" >Product Name - desc</option>

<option value="3" >Price - low to high</option>

<option value="4" >Price - high to low</option>

<option value="5" >Model</option>

<option value="6" >Date Added - New to Old</option>

<option value="7" >Date Added - Old to New</option>

</select></form></div>

I searched for this code using Tools/Developers Tool Kit but could not find that text. Maybe it's called from various places.

Do you think this is the problem or something else? How do I locate the offending code if this is the way to fix this?

Many thanks for any help.

Zen Cart builds the URLs from what you put in the configure.php files. So, it would seem that someone has changed the configure.php contents.

I compared both configure files with a July '11 back-up copy using a program called KDiff3. Both files were identical. No changes.
admin / includes / configure.php
includes / configure.php

I'm confident those files are correctly configured.

Why then does the Source Code on a live opening Zen Cart page:
https://mydomain.com/store/index.php...e=products_all
show http and not https? That might cause a redirect?

The live source code reads:
<form name="sorter_form" action="http://mydomain.com/store/index.php?main_page=products_all"
and
<form name="multiple_products_cart_quantity" action="http://mydomain.com/store/index.php?main_page=products_all&disp_order=1&action=multiple_products_a dd_product"

Or is that the problem? Something else? I'm at a loss. Any direction would be helpful. Thanks.

As I said, Zen Cart builds those URLs from the HTTP_SERVER setting in your configure.php file.

The only exception would be if you've altered the code and inserted specific URLs that are different ... and that would require significant alteration, since it's all built with functions, not with templates.

What is the purpose of this in your .htaccess file?

RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://mydomain.com/$1 [R,L]

I mean, I know that it does, but why are you redirecting all requests to the secure server?

I was wondering the same.

Regarding the page code for the form outside the Zen Cart (on the same site) that was also incurring the same issue, "This is a non-secure form" when the SEND button was clicked. So I was able to change the code by adding an s, "<form action="https://www.bluehost.com/bluemail" and that solved that part of the problem. The form works.

I don't know what the code in the .htaccess is. It was all place there by BlueHost or by their direction to me.

I tried removing the two lines in the .htaccess mentioned by RescoCC below and a miracle happened - the page worked and was able to send.

Oh so many thanks! That was a brilliant comment. Thank you again!