SSL ISSUES
I Found the following issues with insecure form calls when using SSL.
To test your own pages: https://www.whynopadlock.com/index.html
The first issue concerns the search form.
Design75 offered the following correction in this thread https://www.zen-cart.com/showthread.php?216576-Insecure-lt-form-gt-call
FROM:
$content .= zen_draw_form('quick_find_header', zen_href_link(FILENAME_ADVANCED_SEARCH_RESULT, '', 'NONSSL', false), 'get');
TO:
$content .= zen_draw_form('quick_find_header', zen_href_link(FILENAME_ADVANCED_SEARCH_RESULT, '', $request_type, false), 'get');
OR```
$content .= zen_draw_form('quick_find_header', zen_href_link(FILENAME_ADVANCED_SEARCH_RESULT, '', 'SSL', false), 'get');
Apply this correction to: /includes/templates/tableau/sideboxes/tpl_search_header.php
As was the case with the original poster, the first correction worked for me as well.
**The second issue concerns Tableau's Contact_Us page: **
If the following is not changed, you will receive the following message when you attempt to send a message using Tableau's contact form:
> *
> The information you have entered on this page will be sent over an insecure connection and could be read by a third party.
>
> Are you sure you want to send this information?:*
Google Chrome will also add a yellow warning on the padlock when view your site.
To correct this issue, I changed the following file: /includes/templates/tableau/templates/tpl_contact_us_default.php
FROM:
<?php echo zen_draw_form('contact_us', zen_href_link(FILENAME_CONTACT_US, 'action=send')); ?>
TO
<?php echo zen_draw_form('contact_us', zen_href_link(FILENAME_CONTACT_US, 'action=send', 'SSL')); ?>
I didn't have an issue creating an account when using the registration form and submitting the login page to whynopadlock.com yielded no further concerns.
Hopefully this saves someone some time. :smile:
