The site uses https, but when selecting anything from a menu it goes to http

When starting the site it's https:// (as defined in configure.php), but if I then press e.g. front page or shopping cart the connection becomes unprotected. Same for buying an item. My account seems to be the only one remaining https://.

1. What's the URL?
2. What are the definitions for HTTP_SERVER and HTTPS_SERVER in your /includes/configure.php file?
3. Why do you want all pages to be https? What's the specific business reason?

1. t g e .fi

 define('HTTP_SERVER', 'http:// see above with no spaces /');
 define('HTTPS_SERVER', 'https:// see above with no spaces/');

3.When testing I got a warning that the secure contents is sent over a non secure connection.

Now I am however not able to reproduce the warning!

kalastaja:

3.When testing I got a warning that the secure contents is sent over a non secure connection.

Now I am however not able to reproduce the warning!

1. What was the test that gave the warning? This kind of warning shows only in your browser, and not in logs ... so ... should be easy to know when it's present or not.

2. This article deals with fixing the warning: http://www.zen-cart.com/content.php?185-this-page-contains-both-secure-and-nonsecure-items-%28or-unauthenticated-content-or-connection-partially-encrypted%29 ... but requires you to be able to reproduce the warning.

DrByte:

1. What was the test that gave the warning? This kind of warning shows only in your browser, and not in logs ... so ... should be easy to know when it's present or not.

I ordered a product and when adding to cart I got the message. Now when I add to cart - nothing out of the ordinary. Does the browser remember the warning and avoids repeating it?

kalastaja:

Does the browser remember the warning and avoids repeating it?
No, but there are other things happening on the page which could cause it:

• maybe you selected a different product? (vs one that has unsecured assets on it)
• maybe you have certain advertising banners that appear in random order, so don't always trigger the error on every page?
• maybe you have other addons such as social media boxes which appear only at certain times, and those are causing your problems?
• etc

Also, making every page https does not necessarily resolve the secure contents notification. If content is hard coded as either http: or https: when the sites address is https: or http: (respectfully) then that message could appear if the browser is set to alert on such an issue. One way I have tracked down these type of hard coded image/display issues is to do a search on the files for something like: src="http

It won't catch versions with spaces aside the = symbol; however, helps with resolving that issue when properly formatted for display or prevented from being shown as applicable.

If you use Google Chrome, use the inspect element. This is found when pressing the right mouse button. After the screen has come up select the console tab. This will show more information about the insecure content