Forums / Basic Configuration / SSL secure and non-secure items

SSL secure and non-secure items

Started by angel17846 on 23 May 2006, 6:22 PM · Views: 28,966

Results 1 to 20 of 83
23 May 2006, 6:22 PM
#1
angel17846 avatar

angel17846

New Zenner

Join Date:
Dec 2005
Posts:
57
Plugin Contributions:
0

SSL secure and non-secure items

I cannot track down my references to non-secure images or links on this site.

http://www.metrofantasies.com/index.php

When I go to login or checkout, I get the ugly "secure and non-secure items" alert.

All images seem to be pointing to relative positions. Does anyone see what I'm missing?

Thanks,
Angel

23 May 2006, 6:40 PM
#2
angel17846 avatar

angel17846

New Zenner

Join Date:
Dec 2005
Posts:
57
Plugin Contributions:
0

Re: SSL secure and non-secure items

Oh, I should also mention that I have a symbolic link for the http:// and https://, so everything is in one folder on the server.

Also, the warning does not come up when I access the admin.

Angel

24 May 2006, 6:34 AM
#3
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,515
Plugin Contributions:
176

Re: SSL secure and non-secure items

I'm not seeing the alert...

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

19 Aug 2007, 1:00 AM
#4
milobloom avatar

milobloom

Totally Zenned

Join Date:
Feb 2004
Posts:
1,267
Plugin Contributions:
1

Re: SSL secure and non-secure items

I am getting the same problem at checkout...

Can someone look at

https://www.nothingbutcostumes.com

Take a look at any product and click checkout.

19 Aug 2007, 1:56 AM
#5
Kim avatar

Kim

Obaa-san

Join Date:
Jun 2003
Location:
West Coast, North America
Posts:
26,692
Plugin Contributions:
0

Re: SSL secure and non-secure items

Milo-

Your problems are caused by a domain name mismatch - your site is running with the WWW and the Certificate is missing those ...

Please do not PM for support issues: a private solution doesn't benefit the community.

Be careful with unsolicited advice via email or PM - Make sure the person you are talking to is a reliable source.

19 Aug 2007, 2:18 AM
#6
milobloom avatar

milobloom

Totally Zenned

Join Date:
Feb 2004
Posts:
1,267
Plugin Contributions:
1

Re: SSL secure and non-secure items

Can you try it again now.. I am getting the same problem in IE but not firefox.

I switched the config to say https://nothing... Instead of www

19 Aug 2007, 2:22 AM
#7
Kim avatar

Kim

Obaa-san

Join Date:
Jun 2003
Location:
West Coast, North America
Posts:
26,692
Plugin Contributions:
0

Re: SSL secure and non-secure items

k- still getting the "unknown authority etc" - possibly server misconfiguration ...

Please do not PM for support issues: a private solution doesn't benefit the community.

Be careful with unsolicited advice via email or PM - Make sure the person you are talking to is a reliable source.

19 Aug 2007, 2:25 AM
#8
milobloom avatar

milobloom

Totally Zenned

Join Date:
Feb 2004
Posts:
1,267
Plugin Contributions:
1

Re: SSL secure and non-secure items

Would that be something I did trying to generate the crt?
Or something my host did?

21 Aug 2007, 7:24 AM
#9
access avatar

access

New Zenner

Join Date:
Aug 2005
Posts:
80
Plugin Contributions:
0

Re: SSL secure and non-secure items

Hello I am getting the same message;

"This page contains both secure and nonsecure items.

Do you want to display the nonsecure items?"

And only appears in Internet Explorer.

The site is http://www.jewelstore.com.au

Could someone explain to me exactly what causes this message? Is it mismatched domain or from hard linked images?

21 Aug 2007, 8:52 AM
#10
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,515
Plugin Contributions:
176

Re: SSL secure and non-secure items

Access:

Hello I am getting the same message;

"This page contains both secure and nonsecure items.

Do you want to display the nonsecure items?"

And only appears in Internet Explorer.

The site is http://www.jewelstore.com.au

Could someone explain to me exactly what causes this message? Is it mismatched domain or from hard linked images?

"where" are you getting that message ? I don't see it on your login page.

It's typically caused by having hardcoded http: links to images instead of relative links or https: links.
This also often happens by installing tracking code to a site by blindly copy-and-pasting what's supplied by a tracking company. The links need to be converted to work in secure mode.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

22 Aug 2007, 4:56 AM
#11
access avatar

access

New Zenner

Join Date:
Aug 2005
Posts:
80
Plugin Contributions:
0

Re: SSL secure and non-secure items

DrByte:

"where" are you getting that message ? I don't see it on your login page.

It's typically caused by having hardcoded http: links to images instead of relative links or https: links.
This also often happens by installing tracking code to a site by blindly copy-and-pasting what's supplied by a tracking company. The links need to be converted to work in secure mode.

https://www.jewelstore.com.au/index.php?main_page=index

Hello thats an example of a page that does it, some poor development has gone onto this project from multiple parties so I imagine their may be many hard links. Will pool through it.

22 Aug 2007, 5:29 AM
#12
chuck avatar

chuck

Totally Zenned

Join Date:
Jul 2005
Posts:
255
Plugin Contributions:
0

Re: SSL secure and non-secure items

drByte is right that there must be a hard-coded link somewhere.

but it's not in your php or javascript files ... it's in your stylesheet's footer code
in your stylesheet.css i see:```
.footer_c1 { width:567px; background:#FFFFFF url(http://www.diamondexchange.com.au/starlight/img/footer.png) left bottom;}
.footer_c2 { width:0px;}
.footer_c3 { width:207px; background:#FFFFFF url(http://www.diamondexchange.com.au/starlight/img/footer.png) right bottom;}

24 Aug 2007, 9:52 PM
#13
bekahruth avatar

bekahruth

Zen Follower

Join Date:
Feb 2007
Posts:
101
Plugin Contributions:
0

Re: SSL secure and non-secure items

DrByte:

"where" are you getting that message ? I don't see it on your login page.

It's typically caused by having hardcoded http: links to images instead of relative links or https: links.
This also often happens by installing tracking code to a site by blindly copy-and-pasting what's supplied by a tracking company. The links need to be converted to work in secure mode.

How do you convert the links?

25 Aug 2007, 5:13 AM
#14
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,515
Plugin Contributions:
176

Re: SSL secure and non-secure items

BekahRuth:

How do you convert the links?

You could start by changing them to https: instead of http:

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

4 Sep 2007, 4:22 AM
#15
access avatar

access

New Zenner

Join Date:
Aug 2005
Posts:
80
Plugin Contributions:
0

Re: SSL secure and non-secure items

chuck:

drByte is right that there must be a hard-coded link somewhere.

but it's not in your php or javascript files ... it's in your stylesheet's footer code
in your stylesheet.css i see:```
.footer_c1 { width:567px; background:#FFFFFF url(http://www.diamondexchange.com.au/starlight/img/footer.png) left bottom;}
.footer_c2 { width:0px;}
.footer_c3 { width:207px; background:#FFFFFF url(http://www.diamondexchange.com.au/starlight/img/footer.png) right bottom;}




Wow thankyou so much! Your a gentlemen.
6 Sep 2007, 7:15 AM
#16
dealbyethan_com avatar

dealbyethan_com

Totally Zenned

Join Date:
Dec 2005
Location:
Perth, Western Australia, Australia
Posts:
782
Plugin Contributions:
0

Re: SSL secure and non-secure items

Hi,

I am having similar warning with secure and nonsecure items during checkout. How do I find out what is causing it?

**The Team Behind DealByEthan.com | **Curating unique finds for a discerning community. Committed to a seamless and inspiring shopping experience. *Connect with us: *https://linktr.ee/dealbyethan

6 Sep 2007, 3:50 PM
#17
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,515
Plugin Contributions:
176

Re: SSL secure and non-secure items

Go to your checkout page where you get those warnings.
Go to your browser menu ... likely under Edit or View, and choose View Source.
Copy the source to your clipboard, and paste it here for review.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

7 Sep 2007, 12:42 AM
#18
dealbyethan_com avatar

dealbyethan_com

Totally Zenned

Join Date:
Dec 2005
Location:
Perth, Western Australia, Australia
Posts:
782
Plugin Contributions:
0

Re: SSL secure and non-secure items

Hi DrByte,

Thanks for your response. I realized that during checkout there are links to myspace and google translate (which I would like to keep). Could this be what is causing the problem? If it is, is it possible to disable those links during checkout? What do you suggest?

Thank you.

**The Team Behind DealByEthan.com | **Curating unique finds for a discerning community. Committed to a seamless and inspiring shopping experience. *Connect with us: *https://linktr.ee/dealbyethan

7 Sep 2007, 4:15 AM
#19
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,515
Plugin Contributions:
176

Re: SSL secure and non-secure items

dealbyethan.com:

I realized that during checkout there are links to myspace and google translate (which I would like to keep). Could this be what is causing the problem? If it is, is it possible to disable those links during checkout? What do you suggest?

That is most likely your problem. Yes, of course, disable them during checkout !

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

7 Sep 2007, 4:57 AM
#20
dealbyethan_com avatar

dealbyethan_com

Totally Zenned

Join Date:
Dec 2005
Location:
Perth, Western Australia, Australia
Posts:
782
Plugin Contributions:
0

Re: SSL secure and non-secure items

Hi DrByte,

How do I disable those links during checkout? I know which file these links are located. But I don't know how to make sure they are displayed when someone is just browsing and turned off when they checkout? Thank you.

**The Team Behind DealByEthan.com | **Curating unique finds for a discerning community. Committed to a seamless and inspiring shopping experience. *Connect with us: *https://linktr.ee/dealbyethan