Forums / Basic Configuration / SSL secure and non-secure items

SSL secure and non-secure items

Started by angel17846 on 23 May 2006, 6:22 PM · Views: 28,966

Results 21 to 40 of 83
7 Sep 2007, 5:01 AM
#21
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,515
Plugin Contributions:
176

SSL secure and non-secure items

dealbyethan.com:

How do I disable those links during checkout? I know which file these links are located. But I don't know how to make sure they are displayed when someone is just browsing and turned off when they checkout? Thank you.

Which file are they in?
Please post the code.

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

8 Sep 2007, 1:39 AM
#22
dealbyethan_com avatar

dealbyethan_com

Totally Zenned

Join Date:
Dec 2005
Location:
Perth, Western Australia, Australia
Posts:
782
Plugin Contributions:
0

Re: SSL secure and non-secure items

Hi DrByte,

They are in the following file:

/public_html/includes/templates/ZC03C8447TM/common/tpl_main_page.php

Thanks.

**The Team Behind DealByEthan.com | **Curating unique finds for a discerning community. Committed to a seamless and inspiring shopping experience. *Connect with us: *https://linktr.ee/dealbyethan

8 Sep 2007, 2:04 AM
#23
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,515
Plugin Contributions:
176

Re: SSL secure and non-secure items

DrByte:

Which file are they in?
Please post the code.

dealbyethan.com:

They are in the following file:

/public_html/includes/templates/ZC03C8447TM/common/tpl_main_page.phpThanks for sharing the filename.
Can you also share the code that's in the file?

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

8 Sep 2007, 5:00 AM
#24
dealbyethan_com avatar

dealbyethan_com

Totally Zenned

Join Date:
Dec 2005
Location:
Perth, Western Australia, Australia
Posts:
782
Plugin Contributions:
0

Re: SSL secure and non-secure items

Hi DrByte,

The codes are as follows.

Link to MySpace
<a href="http://www.myspace.com/dealbyethan" target="_blank">MySpace</a>

Link to Google Translation
<a href="http://translate.google.com/translate?u=http%3A%2F%2Fwww.dealbyethan.com&langpair=en%7Cfr&hl=en&safe=off&ie=UTF-8&oe=UTF-8&prev=%2Flanguage_tools" border="0"><img src="/pictures/france.gif" border="0"></a>

Thank you.

**The Team Behind DealByEthan.com | **Curating unique finds for a discerning community. Committed to a seamless and inspiring shopping experience. *Connect with us: *https://linktr.ee/dealbyethan

8 Sep 2007, 8:46 AM
#25
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,515
Plugin Contributions:
176

Re: SSL secure and non-secure items

Okay, rather than giving you exactly what to do, I'll have to give you the concept and hope you can do it yourself.

Put this before the part you don't want to load on SSL pages:

<?php if ($request_type == 'NONSSL') { ?>

and put this after it:

<?php } ?>

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

8 Sep 2007, 11:37 AM
#26
dealbyethan_com avatar

dealbyethan_com

Totally Zenned

Join Date:
Dec 2005
Location:
Perth, Western Australia, Australia
Posts:
782
Plugin Contributions:
0

Re: SSL secure and non-secure items

Hi DrByte,

After some testing, I found out what was really giving me the problem. It wasn't the external links to myspace nor to google translation. It was actually the Live Help (by Help Center Live). Any idea why this is a nonsecure item? For your information, this separate module is not external but has been installed under my root. There isn't 'http' in the link code either.

Thank you so much for your help. Much appreciated.

**The Team Behind DealByEthan.com | **Curating unique finds for a discerning community. Committed to a seamless and inspiring shopping experience. *Connect with us: *https://linktr.ee/dealbyethan

8 Sep 2007, 4:00 PM
#27
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,515
Plugin Contributions:
176

Re: SSL secure and non-secure items

It's this:```
<embed[B] src="http://[/B]lads.myspace.com/photoshow/slideshow.swf" type="application/x-shockwave-flash" quality="high" scale="noscale" wmode="transparent" flashvars="userID=108957088&bgColor=10079487&bgColor2=10079487&transitionSpeed=4&transitionStyle=b&showCaptions=1&albumID=1013221" width="500" height="250" name="slider" align="middle"/>

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

8 Sep 2007, 4:23 PM
#28
dealbyethan_com avatar

dealbyethan_com

Totally Zenned

Join Date:
Dec 2005
Location:
Perth, Western Australia, Australia
Posts:
782
Plugin Contributions:
0

Re: SSL secure and non-secure items

Hi DrByte,

I know the homepage photoshow is external code. But during checkout, the photoshow does not appear so I don't think it is the cause of the nonsecure alert.

The Live Help is not related to the photoshow code. The only thing I disable during checkout is this Live Help using the code you provided. This did get rid of the nonsecure alert. I just couldn't understand why this is the cause as it is not external but installed under my root.

Thanks.

**The Team Behind DealByEthan.com | **Curating unique finds for a discerning community. Committed to a seamless and inspiring shopping experience. *Connect with us: *https://linktr.ee/dealbyethan

23 Sep 2007, 12:44 AM
#29
bekahruth avatar

bekahruth

Zen Follower

Join Date:
Feb 2007
Posts:
101
Plugin Contributions:
0

Re: SSL secure and non-secure items

DrByte:

Okay, rather than giving you exactly what to do, I'll have to give you the concept and hope you can do it yourself.

Put this before the part you don't want to load on SSL pages:

<?php if ($request_type == 'NONSSL') { ?>
>  
> and put this after it:
> ```
<?php } ?>

I want to use the above code in my tpl_blank_sidebox.php.

This is in my tpl_blank_sidebox.php:

 
<?php
//
// Blank Sidebox Mod
// includes/templates/templates_default/sideboxes/tpl_blank_sidebox.php
//
//  --------------------------------------------------
//  [URL="http://www.mommamuse.com/"]http://www.MommaMuse.com[/URL] mod Zen-Cart - by Judi Cox                  
//  --------------------------------------------------
//  zen-cart Open Source E-commerce                                      
//  Copyright (c) 2003-2006 The zen-cart developers                           
//  [URL]http://www.zen-cart.com/index.php[/URL]                                    
//  Portions Copyright (c) 2003 osCommerce                               
//  --------------------------------------------------
//  This source file is subject to version 2.0 of the GPL license,       
//  that is bundled with this package in the file LICENSE, and is        
//  available through the world-wide-web at the following url:           
//  [URL]http://www.zen-cart.com/license/2_0.txt[/URL].                             
//  If you did not receive a copy of the zen-cart license and are unable 
//  to obtain it through the world-wide-web, please send a note to       
//  [EMAIL="[email protected]"][email protected][/EMAIL] so we can mail you a copy immediately.
//  --------------------------------------------------
//
// $Id: tpl_blank_sidebox.php,v 1.0 6/24/2006
// Original modification by Carter Harris [EMAIL="[email protected]"][email protected][/EMAIL] based on the tpl_featured.php file 
// Additionally modified by Judi Cox [URL="http://www.mommamuse.com/"]http://www.mommamuse.com[/URL]
  $content = '';
  $content .= '<div id="' . str_replace('_', '-', $box_id . 'Content') . '" class="sideboxEmail">';
  $content .= '
<!-- EDIT BELOW THIS LINE -->
<table align="center">
<tr>
   <td align="center">
<a href="<A href="http://www.tehome.net/shop/index.php?main_page=wordpress"><img">http://www.tehome.net/shop/index.php?main_page=wordpress"><img src="<A href="http://tehome.net/shop/images/blog_sidebar.jpg"</a">http://tehome.net/shop/images/blog_sidebar.jpg"</a>
   </td>
<tr>
<tr>
   <td align="center"> 
   </td>
<tr>
</table>
<!-- EDIT ABOVE THIS LINE -->
';
  $content .= '</div>';
?>

Where do I place the code to turn off this sidebox when using ssl?

4 Oct 2007, 12:54 AM
#30
bx1 avatar

bx1

New Zenner

Join Date:
Aug 2007
Location:
Australia
Posts:
67
Plugin Contributions:
0

Re: SSL secure and non-secure items

Hi All,

I am also getting the same alert. I've tried changing hard links to https but it doesn't seem to work. Also if I change all my links to that won't it make my page load slower? I can't figure out which file is affecting my sll. My site is http://www.beautyxpress.com.au If you could point my in the right direction it would be much appreciated. Thanks all!

Online skin care and cosmetics
http://www.beautyxpress.com.au

4 Oct 2007, 1:45 AM
#31
Kim avatar

Kim

Obaa-san

Join Date:
Jun 2003
Location:
West Coast, North America
Posts:
26,692
Plugin Contributions:
0

Re: SSL secure and non-secure items

We need the URL to the Zen Cart -

Please do not PM for support issues: a private solution doesn't benefit the community.

Be careful with unsolicited advice via email or PM - Make sure the person you are talking to is a reliable source.

4 Oct 2007, 1:50 AM
#32
bx1 avatar

bx1

New Zenner

Join Date:
Aug 2007
Location:
Australia
Posts:
67
Plugin Contributions:
0

Re: SSL secure and non-secure items

Oops sorry about that I forgot I haven't redirected it yet..anyways here it is. Thanks again.

http://www.beautyxpress.com.au/store

Online skin care and cosmetics
http://www.beautyxpress.com.au

4 Oct 2007, 9:43 PM
#33
bx1 avatar

bx1

New Zenner

Join Date:
Aug 2007
Location:
Australia
Posts:
67
Plugin Contributions:
0

Re: SSL secure and non-secure items

Hi All!

I'm going live today!! So excited but was hoping to have this SSL thing sorted so it doesn't bug my customers. Please help if you can. Thanks.

Online skin care and cosmetics
http://www.beautyxpress.com.au

4 Oct 2007, 10:02 PM
#34
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,515
Plugin Contributions:
176

Re: SSL secure and non-secure items

It appears that your define_main_page.php contains numerous hard-coded HTTP links to images, instead of leaving them as relative links:```
<img src="http://www.beautyxpress.com.au/store/includes/templates/theme052/images/grand_opening.jpg">

Beauty Xpress is finally here and ready to share the savings with you! <b>Everything is 10-15% Off!</b> If you buy over $75 worth of products, you also receive free shipping! As we are already committed to low pricing this offer only lasts for two weeks. So hurry and buy big and save!<br /><br />

Also, if you buy any Mirenésse products this month you will receive free Mirenésse gifts with your order (available until stocks lasts).<br /><br />

Come join in the festivities! Have a look around and see if there's something that takes your fancy. Remember if you can't afford it right now (or you would rather someone else bought it for you), take advantage of our wishlists. To find out more <a href="http://www.beautyxpress.com.au/store/index.php?main_page=page_3#WhatisawishlistandhowdoIuseit">click here</a>.<br /><br />

We hope you enjoy savings we offer you in October. If you have any questions, please don't hesitate to contact the <a href="mailto:[email protected]">customer service</a> team.<br /><br />

<table width="360" border="0"> <tr> <td colspan="2"><div align="center"><img src="http://www.beautyxpress.com.au/store/includes/templates/theme052/images/banner_top.jpg"></div></td> </tr> <tr> <td> <div align="left"> <a href="http://www.beautyxpress.com.au/store/index.php?main_page=products_all"><img src="http://www.beautyxpress.com.au/store/includes/templates/theme052/images/banner_sideleft.jpg" alt="Opening Sale"> </a> </div> </td>
<td><div align="right">

<a href="http://www.beautyxpress.com.au/store/index.php?main_page=index&cPath=28_43_126"><img src="http://www.beautyxpress.com.au/store/includes/templates/theme052/images/banner_sideright.jpg" alt="Free Mirenésse Gifts"></div></td>

</tr> </table> <br />

<img src="http://www.beautyxpress.com.au/store/includes/templates/theme052/images/staff_picks.jpg">

Our staff have tried and tested products to take out all the guesswork of your purchasing. To read


Additionally, you have two instances where you're calling javascript files using direct http: links:```
<script src="http://www.beautyxpress.com.au/store/search_category.js" language="JavaScript" type="text/javascript"></script>
<script src="http://www.beautyxpress.com.au/store/search_skin_type.js" language="JavaScript" type="text/javascript"></script>

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

4 Oct 2007, 10:39 PM
#35
bx1 avatar

bx1

New Zenner

Join Date:
Aug 2007
Location:
Australia
Posts:
67
Plugin Contributions:
0

Re: SSL secure and non-secure items

Thanks DrByte, I changed the things that you recommended to change but I'm still having problems. My guess is a have a lot of these hard coded links all over the website. Is there any particular place I should look? Also, how do you write links that are not hard coded?

Online skin care and cosmetics
http://www.beautyxpress.com.au

4 Oct 2007, 11:34 PM
#36
bx1 avatar

bx1

New Zenner

Join Date:
Aug 2007
Location:
Australia
Posts:
67
Plugin Contributions:
0

Re: SSL secure and non-secure items

Ok, so I've gone through every hard link I can find and it is still showing the error. I'm running out of ideas on how to fix this. If anyone has a spare couple of minutes please help.

Online skin care and cosmetics
http://www.beautyxpress.com.au

5 Oct 2007, 2:04 AM
#37
bx1 avatar

bx1

New Zenner

Join Date:
Aug 2007
Location:
Australia
Posts:
67
Plugin Contributions:
0

Re: SSL secure and non-secure items

It's all fixed! After changing every single hard coded link I could find (and there was quite a few) my SSL message was still appearing. I ended up changing some code on my flash header and now it all works. Thanks for your help guys I really appreciate it!! :clap:

Online skin care and cosmetics
http://www.beautyxpress.com.au

11 Oct 2007, 9:57 AM
#38
copels avatar

copels

New Zenner

Join Date:
Feb 2006
Posts:
51
Plugin Contributions:
0

Re: SSL secure and non-secure items

Hi there

I'm having the same problem (https://www.giftsfromwales.com).

I'm sure I had this problem before when I originally installed zencart and used a flash logo but I'm going back a few a years! I checked the code for the flash logo and it doesn't appear to have any direct references:

<!--bof-branding display-->
<div id="logoWrapper">
  <div id="logo"><object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"    
   codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,0,0"
   width="798" height="100">   
   <param name="movie" value="../includes/templates/Gifts%20From%20Wales/images/logo.swf">   
   <param name="quality" value="high">   
   <param name="LOOP" value="false">   
   <param name="menu" value="false">   
   <embed src="../includes/templates/Gifts%20From%20Wales/images/logo.swf"   
   width="800" height="100"   
   loop="false" quality="high"   
   pluginspage="http://www.macromedia.com/go/getflashplayer"   
   type="application/x-shockwave-flash" menu="false">    
</embed></object></div>

Can anybody help me?

Thanks

Steve

My Zencarts:

Giftsfromwales

11 Oct 2007, 11:02 AM
#39
drbyte avatar

drbyte

Sensei

Join Date:
Jan 2004
Posts:
63,515
Plugin Contributions:
176

Re: SSL secure and non-secure items

copels:

I checked the code for the flash logo and it doesn't appear to have any direct referencesSure it does:

codebase="http://download.macromedia.com/pu...

and

pluginspage="http://www.macromedia.com/go/getflashplayer" 

.
Zen Cart - putting the dream of business ownership within reach of anyone!
Donate to: DrByte directly or to the Zen Cart team as a whole

Remember: Any code suggestions you see here are merely suggestions. You assume full responsibility for your use of any such suggestions, including any impact ANY alterations you make to your site may have on your PCI compliance.
Furthermore, any advice you see here about PCI matters is merely an opinion, and should not be relied upon as "official". Official PCI information should be obtained from the PCI Security Council directly or from one of their authorized Assessors.

11 Oct 2007, 4:50 PM
#40
copels avatar

copels

New Zenner

Join Date:
Feb 2006
Posts:
51
Plugin Contributions:
0

Re: SSL secure and non-secure items

Thanks Dr Byte - any idea what I need to change to get this to work? Should I just take them out?

Thanks

Steve

My Zencarts:

Giftsfromwales