Zen Cart Logo
Forums / General Questions / Insecure <form> call. Found on line # 1155 in file: www.mysite.com/store

Insecure <form> call. Found on line # 1155 in file: www.mysite.com/store

Views: 1,491

Results 1 to 5 of 5
7 Jul 2015, 2:55 AM
#1
magicman avatar

magicman

Zen Follower

Join Date:
Oct 2007
Location:
MA, USA
Posts:
385
Plugin Contributions:
0

Insecure <form> call. Found on line # 1155 in file: www.mysite.com/store

Firefox is not displaying my SSL padlock.

WhyNoPadlock issues this error.:

Insecure <form> call.
Found on line # 1155 in file: store154/index.php?main_page=login
(Note: Chrome will show a security error for any secure page with an insecure <form> call on the page)

This is a fresh install of Zen 154. There is no line 1155 in the index.php file. I do not know where to look or which files to edit. I have another site that gives a different error.
Please help

SSL works fine on Exploror.

Thank you, Sincerely, MagicMan

7 Jul 2015, 3:16 AM
#2
frank18 avatar

frank18

Deceased

Join Date:
Nov 2007
Location:
Sunny Coast, Australia
Posts:
3,427
Plugin Contributions:
2

Re: Insecure <form> call. Found on line # 1155 in file: www.mysite.com/store

Can you post a link to your site please?

NOTE: We are sorry that Frank is no longer with us.
We are grateful for all his contributions to the Zen Cart community.

7 Jul 2015, 4:09 PM
#3
mc12345678 avatar

mc12345678

Totally Zenned

Join Date:
Jul 2012
Posts:
16,908
Plugin Contributions:
2

Re: Insecure <form> call. Found on line # 1155 in file: www.mysite.com/store

The line number reported is more than likely the line number associated with the html source that you can review once the page is loaded. By providing the site link, others can help identiify the specific file that is more than likely presenting the issue. This is more likely an issue related to your template as the default template will present the forms on a standard login screen with a secure request if the page starts secure, but that can't be identified by others wthout additional information.

ZC Installation/Maintenance Support <- Site
Contribution for contributions welcome...

7 Jul 2015, 4:53 PM
#4
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,513
Plugin Contributions:
176

Re: Insecure <form> call. Found on line # 1155 in file: www.mysite.com/store

Related: This page contains both secure and nonsecure items (or "Unauthenticated content" or "connection partially encrypted").

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

20 Jul 2015, 6:23 PM
#5
magicman avatar

magicman

Zen Follower

Join Date:
Oct 2007
Location:
MA, USA
Posts:
385
Plugin Contributions:
0

Re: Insecure <form> call. Found on line # 1155 in file: www.mysite.com/store

I found the fix. In addition Firefox and Chrome were not recognizing my SSL Certificates. I found the fix and had to notify my hosting company as they were incompetent on this one. Anyway, here it is...

INSTRUCTIONS: You shouldn't use RC4 in any cipher suite, as this cryptographic protocol is considered broken and has been prohibited by the IETF.

Thus the warning from firefox on the use of a RC4-based cipher suite.

You should update your SSLCipherSuite to something such as SSLCipherSuite HIGH:!RC4:!ADH:!DH:!AES:!EXPORT:!SSLv2:!3DES

Hope this can help someone else.

Thank you, Sincerely, MagicMan