SSL secure and non-secure items

Think I solved it by using https rather than http.

Steve

I've just installed SSL and have made sure I have removed all hardcoded links within my site and I'm still getting the secure, no-secure popup in IE7. HELP! I don't know what else could be causing it. I have a couple external links but they shouldn't be causing it? Please have a look if you have time. Thanks

https://www.modamuse.com/index.php?main_page=

I've had the "nonsecure items" problem in IE too. When I click "no" to not display the nonsecure items, my background is the only thing that does not show up. I looked inside my stylesheet.css and the background is called out the same as the tileback images. Can anyone tell me how I can fix my background image so it doesn't give IE a heart attack every time you go to a https page on my site. Any help would be appreciated. my site is http:https://www.mainlinetrains.com

Mark

I'm getting this error because of a hardcoded link to Comodo's trust logo image. I guess changing the "http" to "https" would fix it, but is there a way to make it a relative link instead? The image is in the zen image directory (which I think is referenced by DIR_WS_IMAGES?) but I don't know how to format the link in "Zen-ese".

The banner manager has a feature specifically to allow banners to display as SSL. I am having the same non secure items error in IE and a firefox lock with the red bar across it indicating same issue.

The only hard coded links to images I changed from http to https and have same problems.

https://www.reallifespan.com

Ideas anyone ? :huh:

I deleted banners and the problem went away. It appears that the SSL option for banners is of no use when you use banner code that is sent from outside as from CJ.com. I am going to contact them to see if they have options to fix that.

Have a great day!

Shop Here, I need the money! http://www.florida-saver.com/savenow.php

The option in the Banners Manager for SSL is for you to say if the banner is capable of running on secure pages ...

It does not change the banner so that it can, it just removes the banner from the list of banners displayed when on SSL pages if you say that the banner cannot be run on secure pages ...

Hi,

I've narrowed the problem down to the google checkout logo, which i've placed in a banner:

<link rel="stylesheet" href="https://checkout.google.com/seller/accept/s.css" type="text/css" media="screen" /> <script type="text/javascript" src="https://checkout.google.com/seller/accept/j-en_GB.js"></script> <script type="text/javascript">showMark(3);</script> <noscript>

img src="https://checkout.google.com/seller/accept/images/sc.gif" width="72" height="73" alt="Google Checkout Acceptance Mark" /></noscript>

Is there anything obvious in this code that may be causing the 'secure non secure items' error?

Whenever an SSL connection is used and there are links off-site, there will always be a security warning -- because it goes against SSL security to use links to a site other than your own.

Sometimes you can "trick" SSL though, by putting your code elsewhere on your site and using (for example) Javascript to pull that code into your page.

Website Rob:

Whenever an SSL connection is used and there are links off-site, there will always be a security warning -- because it goes against SSL security to use links to a site other than your own.

Sometimes you can "trick" SSL though, by putting your code elsewhere on your site and using (for example) Javascript to pull that code into your page.

Thanks for the reply. However, I have the paypal logo and godaddy seal which both reference external links but do not cause this message to appear.

The code for the paypal logo is as follows:

<!-- PayPal Logo --><table border="0" cellpadding="10" cellspacing="0" align="center"><tr><td align="center"></td></tr>
<tr><td align="center"><a href="#" onclick="javascript:window.open('https://www.paypal.com/uk/cgi-bin/webscr?cmd=xpt/cps/popup/OLCWhatIsPayPal-outside','olcwhatispaypal','toolbar=no, location=no, directories=no, status=no, menubar=no, scrollbars=yes, resizable=yes, width=400, height=350');"><img  src="[URL]https://www.paypal.com/en_GB/GB/i/logo/PayPal_mark_60x38.gif[/URL]" border="0" alt="Acceptance Mark"></a></td></tr></table><!-- PayPal Logo -->

I must apologize as I was not quite awake it seems, when making my last post. Did not see the 'https' connection to Google links. Usually an 'https' connection to an off-site URL is another way of avoiding SSL security msgs.

I do believe the problem is with this:

I just found this mod and it was very helpful to get rid of my SSL secure/non-secure problems. Just some easy editing of this sidebox is all you need:

http://www.zen-cart.com/index.php?main_page=product_contrib_info&cPath=40_52&products_id=649

You were quite right - after digging around other sites which have the google acceptance mark i saw the file they were linking to was 'j.js' as opposed to 'j-en_GB.js' and this fixed my problem.

Many thanks.

Coop1979:

I just found this mod and it was very helpful to get rid of my SSL secure/non-secure problems. Just some easy editing of this sidebox is all you need:

http://www.zen-cart.com/index.php?main_page=product_contrib_info&cPath=40_52&products_id=649

Thanks Coop, but unfortunately, this mod simply doesn't display the non-secure items on a secure page - this can also be achieved by using a banner box with the option 'show on ssl pages' switched off.

I am having the same problem on my site. I have scoured my code for external links, but can't find any. I could really use the help of a guru!

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" dir="ltr" lang="en">
<head>
<title>Step 1 of 3 - Shipping Information : Yes! Online Store</title>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />
<meta name="keywords" content="Back Issues Other Products Subscribe Donate Give Gifts Pay Invoice Renew ecommerce, open source, shop, online shopping Step 1 of 3 - Shipping Information" />
<meta name="description" content="Yes! Online Store : Step 1 of 3 - Shipping Information - Back Issues Other Products Subscribe Donate Give Gifts Pay Invoice Renew ecommerce, open source, shop, online shopping" />
<meta http-equiv="imagetoolbar" content="no" />
<meta name="author" content="The Zen Cart™ Team and others" />
<meta name="generator" content="shopping cart program by Zen Cart™, [url]http://www.zen-cart.com[/url] eCommerce" />
<meta name="robots" content="noindex, nofollow" />

<base href="https://www2418.ssldomain.com/yesmagazine/ZenCart/" />

<link rel="stylesheet" type="text/css" href="includes/templates/yes/css/stylesheet.css" />
<link rel="stylesheet" type="text/css" href="includes/templates/yes/css/stylesheet_css_buttons.css" />

<link rel="stylesheet" type="text/css" media="print" href="includes/templates/yes/css/print_stylesheet.css" />
</head>

<body id="checkoutshippingBody">

<div id="mainWrapper">



<!--bof-header logo and navigation display-->
<div id ="yesHeaderWrapper">
<!-- bof Main header table -->
<table border="0" cellpadding="0" cellspacing="0" width="100%">
	<tr>
		<td>

			<div id="logo"><a href="http://www.yesmagazine.org/ZenCart/"><img src="includes/templates/yes/images/storeheader.jpg" alt="Yes! Store" title=" Yes! Store " width="114" height="79" /></a></div>
		</td>
		<td width="100%" id="yesheaderRightColumn" > 
		
			<!-- bof Sub header table -->
			<table border="0" cellpadding="0" cellspacing="0" width="100%" style="height: 54px">
				<tr>
					<td>
					<div align="right"> 
						<div id="navMain"> 
							<ul class="forward">

							<li><a href="http://www.yesmagazine.org/ZenCart/index.php?main_page=manage_subscription&zenid=gr398pscqi03avrbn11004es95"><img src="includes/templates/yes/images/mysubscription.jpg" alt="My Subscription" title=" My Subscription " width="110" height="10" /></a></li>
															<li><a href="https://www2418.ssldomain.com/yesmagazine/ZenCart/index.php?main_page=logoff&zenid=gr398pscqi03avrbn11004es95"><img src="includes/templates/yes/images/logout.jpg" alt="Logout" title=" Logout " width="63" height="10" /></a></li>
								<li><a href="https://www2418.ssldomain.com/yesmagazine/ZenCart/index.php?main_page=account&zenid=gr398pscqi03avrbn11004es95"><img src="includes/templates/yes/images/myaccount.jpg" alt="My Account" title=" My Account " width="83" height="10" /></a></li>
														
															<li><a href="http://www.yesmagazine.org/ZenCart/index.php?main_page=shopping_cart&zenid=gr398pscqi03avrbn11004es95"><img src="includes/templates/yes/images/shoppingcart.jpg" alt="Shopping Cart" title=" Shopping Cart " width="104" height="10" /></a></li>
													</div>
					</div>
				</td>
				</tr>
				<tr>

					<td valign="bottom"> 
<!--bof-optional categories tabs navigation display-->
<div id="navCatTabsWrapper">
<div id="navCatTabs">
<ul>
  <li><a class="category-top" href="http://www.yesmagazine.org/ZenCart/index.php?main_page=index&cPath=3&zenid=gr398pscqi03avrbn11004es95">Subscribe</a> </li>
  <li><a class="category-top" href="http://www.yesmagazine.org/ZenCart/index.php?main_page=index&cPath=8&zenid=gr398pscqi03avrbn11004es95">Renew</a> </li>
  <li><a class="category-top" href="http://www.yesmagazine.org/ZenCart/index.php?main_page=index&cPath=9&zenid=gr398pscqi03avrbn11004es95">Pay Invoice</a> </li>

  <li><a class="category-top" href="http://www.yesmagazine.org/ZenCart/index.php?main_page=index&cPath=7&zenid=gr398pscqi03avrbn11004es95">Give Gifts</a> </li>
  <li><a class="category-top" href="http://www.yesmagazine.org/ZenCart/index.php?main_page=index&cPath=1&zenid=gr398pscqi03avrbn11004es95">Back Issues</a> </li>
  <li><a class="category-top" href="http://www.yesmagazine.org/ZenCart/index.php?main_page=index&cPath=2&zenid=gr398pscqi03avrbn11004es95">Other Products</a> </li>
  <li><a class="category-top" href="http://www.yesmagazine.org/ZenCart/index.php?main_page=index&cPath=5&zenid=gr398pscqi03avrbn11004es95">Donate</a> </li>
</ul>

</div>
</div>
<!--eof-optional categories tabs navigation display-->
					</td>
				</tr>
			</table>
			<!-- eof Sub header table -->
		
		</td>
	</tr>
</table>

<!-- eof Main header table -->

<!--eof-branding display-->



<!--bof-header ezpage links-->
<!--eof-header ezpage links-->
</div>
<!--div style="width: 100%; border: 1px solid green">End of tpl_header.php</div-->
<table width="100%" border="0" cellspacing="0" cellpadding="0" id="contentMainWrapper" style="height: 350px;">
  <tr>
    <td valign="top">
<!-- bof  breadcrumb -->
<!-- eof breadcrumb -->


<!-- bof upload alerts -->
<!-- eof upload alerts -->

<div class="centerColumn" id="checkoutShipping">

<form name="checkout_address" action="https://www2418.ssldomain.com/yesmagazine/ZenCart/index.php?main_page=checkout_shipping&zenid=gr398pscqi03avrbn11004es95" method="post"><input type="hidden" name="action" value="process" />
<h1 id="checkoutShippingHeading">Step 1 of 3 - Shipping Information</h1>
<p></p>
<div align="left">
<table width="50%" cellspacing="1" cellpadding="3" border="0">
	<tr>
		<td  nowrap="nowrap" class="gray_th">

			<img border="0" alt="" src="images/arrow.gif"/> 
			<b>SHIPPING ADDRESS</b>
		</td>
	</tr>
	<tr>
		<td class="gray_td">

			<div id="checkoutShipto" class="back">
								Kevin Audleman<br /> 7878 NE Yeomalt Point Dr<br /> Bainbridge Is, WA    98110-1971<br /> United States		
			</div>

			<div class="buttonRow forward"><a href="https://www2418.ssldomain.com/yesmagazine/ZenCart/index.php?main_page=checkout_shipping_address&zenid=gr398pscqi03avrbn11004es95"><img src="includes/templates/template_default/buttons/english/small_edit.gif" alt="Edit" title=" Edit " width="40" height="16" /></a></div>
					</td>
	</tr>
</table>
<p>
</p>



<div id="checkoutShippingContentChoose" class="important"></div>


<!-- bof shipping options -->
<div align="left">

<table width="50%" cellspacing="1" cellpadding="3" border="0">
	<tr>
		<td nowrap="nowrap" class="gray_th">
			<img border="0" alt="" src="images/arrow.gif"/> 
			<b>PRODUCT SHIPPING CHARGE</b>
		</td>
	</tr>
	<tr>
		<td class="gray_td">

<input type="radio" name="shipping" value="yesrates_yesrates" checked="checked" id="ship-yesrates-yesrates" /><label for="ship-yesrates-yesrates" class="checkboxLabel" >Flat Rate ($3) </label>
		</td>
	</tr>
</table>
</div>

<!-- eof shipping options -->

<!--
<fieldset class="shipping" id="comments">
<legend>Special Instructions or Comments About Your Order</legend>
<textarea name="comments" cols="45" rows="3"></textarea></fieldset>
-->
<p>
<input type="submit" value="Continue Checkout" class="checkout_button"  />
</p>


</form>
</div>


</td>

  </tr>
</table>



<!--bof-navigation display -->
<div id="navSuppWrapper">
<div id="navSupp">
<ul>
<li><a href="http://www.yesmagazine.org/ZenCart/">Home</a></li>

<li></li>
</ul>
</div>
</div>
<!--eof-navigation display -->

</div>
<!--bof- parse time display -->
<!--eof- parse time display -->
<p> </p>
</body></html>

I should mention:

The funny thing is that the SSL was working fine until a few days ago when our hosting provider moved our site to a new IP address and new SSL address. I updated HTTPS_SERVER in config.php to the new value, which worked just fine. Could that have anything to do with it?

Also, the site can be found at http://www.yesmagazine.org/ZenCart

You can login with user id: [email protected] pw: 12345

My problem seems to have resolved itself. It must have been something to do with the change in IP address for my site that got resolved over a few days.

Kevin

Hello,

I am having the 'secure and nonsecure items' issue only in IE not Firefox or Safari and am really struggling to find out why.
My site is www.outdoorworld.org.uk

I have been checking through for "src=http://" links in the code as advised on the main zencart site but as far as I can see the code links are all relative (maybe Im missing something).

Any help would be much appreciated.

Scotty

Hello,
I have found out that my problem is caused somehow by the "google analytics by andrew" mod that i had recently installed.
I removed the jscript folder in the includes/templates directory and the problem went away. Now I have to get analytics working some other way.

Scotty:smile:

scottydog:

Hello,
I have found out that my problem is caused somehow by the "google analytics by andrew" mod that i had recently installed.
I removed the jscript folder in the includes/templates directory and the problem went away. Now I have to get analytics working some other way.

Scotty:smile:I found the same problem. In particular, it's jscript_googleanalytics_outgoing.php that breaks the SSL. Anyone have a fix yet or am I going to have to figure this out on my own?