Firefox SSL security warning

need_help:

Yes that works just great with the add to cart button.

Thanks ever so much for your time and patience with me.

I am having security warning error on my shopping cart page when customer clicks on quantity changes. If they try to change quantity. Does this file work with it also? Same changes? I do not see error on add to cart button at product page.

Thanks, Kim

If they come to the shopping cart from a secure page and try to click any submit they will see warning as the page is secure but the submits are to non-secure ...

You can either change all submit buttons to use the current $request_type for secure and non-secure or endure that for when they happen to use that particular trail ...

These have been updated on the form tags to use the $request_type to help eliminate this issue ...

Example: on the tpl_product_info_display.php this line was changed to include the $request_type

<?php echo zen_draw_form('cart_quantity', zen_href_link(FILENAME_SHOPPING_CART, 'action=update_product', $request_type)); ?>

in addition to other changes ...

Sideboxes etc are also changed for this ...

Hello,

Ok, I am having this same basic issue with my site https://www.ccrsport.com However this issue is with Internet Explorer, Fire Fox and Safari...maybe more, but those are the 3 that I've checked thus far. Basically a warning pops up when a customer clicks the "Checkout" button and continues on through the checkout process. I'm not sure how long this has been going on, but my massive loss of business the last couple of months lead me to begin looking into why customers were ditching their carts and not coming back. This security warning I believe is scaring many of them off, as they don't know what is going on! PLEASE HELP!!!

Ajeh:

If they come to the shopping cart from a secure page and try to click any submit they will see warning as the page is secure but the submits are to non-secure ...

You can either change all submit buttons to use the current $request_type for secure and non-secure or endure that for when they happen to use that particular trail ...

These have been updated on the form tags to use the $request_type to help eliminate this issue ...

Example: on the tpl_product_info_display.php this line was changed to include the $request_type

> 
> in addition to other changes ...
> 
> Sideboxes etc are also changed for this ...

Thank you! I tried several times and no error!:clap::clap:

You still need to fix your manufacturers dropdown sidebox as that is a submit too ... :smile:

Ajeh:

You still need to fix your manufacturers dropdown sidebox as that is a submit too ... :smile:

Do you mean sideboxes/tpl_manufacturers-select.php? Got it.

Thank you. Kim:clap:

I'm breaking down and asking for help after many hours of trying to fix my "Firefox" SSL security warning. I have version 1.38 and am using the CSS Flyout Header 1.5 (but of course, I know this must be an operator (sic) error). I have read, re-read, and re-re-re-read this thread and am having no success. My primary concern is that it occurs when "Add to Cart" is clicked after the user has hit the SSL area and then clicks "Shop Now." If I could get this resolved, I wouldn't worry about any other such errors at this time.

Following the instructions in this thread, my file tpl_product_info_display.php has been modified to read:

    echo zen_draw_form('multiple_products_cart_quantity', zen_href_link(FILENAME_PRODUCTS_ALL, zen_get_all_get_params(array('action')) . 'action=multiple_products_add_product', $request_type), 'post', 'enctype="multipart/form-data"');    

Yet, even after clearing my cache, forcing a reload, etc., when the page displays, the source reads: <form name="multiple_products_cart_quantity" action="http://www.sensuoussoaps.com/index.php?main_page=index&cPath=1&sort=20a&action=multiple_products_add_product" method="post" enctype="multipart/form-data"> and the warning continues.

So, there it is. I'm at a loss and have spent way too many hours trying to fix something that I'm clearly not seeing properly. I have an index.htm page in my www directory, so if anyone wants to see the issue in action, it's happening at https://www.sensuoussoaps.com/index.php. Much appreciation for any suggestions or pointers in the right direction in advance.
Lisa :frusty:

Is it the All Products that is giving you trouble or when navigating the categories?

If when navigating the categories, try changing the module products_listing.php instead ...

:yes: That did it!

Linda, thank you many times over! Since I've only got one category populated.....well, there's just no way I would have EVER thought to look to the file you pointed out --- and that was where I made the change that resolved my problem.

Thanks again for your quick reply and assistance.

Lisa

You are most welcome ... glad that this was able to help ... :smile:

I think that I have fixed this issue on my site- except in one spot. The order confirmation page. I "think" that the line that need to be edited is...

echo zen_draw_form('fec_confirmation', $form_action_url, 'post', 'id="fec_confirmation" onsubmit="submitonce();"');

but I'm just not sure how to get that $request_type in there.

Any assistance would be appreciated!

FYI- the order actually went through and charged the customers card but she pushed cancel when the error came up. The order never posted in the admin.

Thanks
Nancy

What is the value of the:
$form_action_url

Example, on the checkout_confirmation header file it is set as:

$form_action_url = zen_href_link(FILENAME_CHECKOUT_PROCESS, '', 'SSL'); 

Hey Lynda- Thanks for taking a look...

in includes/modules/pages/fec_confirmation/header_php.php that very same line appears:

$form_action_url = zen_href_link(FILENAME_CHECKOUT_PROCESS, '', 'SSL');

do I change it to:
$form_action_url = zen_href_link(FILENAME_CHECKOUT_PROCESS, '', 'SSL');

Do I change the SSL to $request_type?

Nancy

May I ask why you think you need to touch something like that on the cart?

I am not following what you are doing ...

What is the fec_confirmation page you have ... what is it suppose to do? Are you trying to make it secure, non-secure or work based on the current setting?

Linda~

The site is palmettoengraving.net. This all started today because I received notification for my credit card processor that I had received a payment. I logged into my admin to handle this particular order and there was no order. The customers info was there but no info about what was purchased. I called the customer- she called me back and said that when she was checking out, she got the message:

Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.

Are you sure you want to continue sending this information?

When she got that message, she chose to "cancel"- not good. I told her that I had received her payment and I would handle the details.

Order fixed but now I have this warning to deal with- I don't want to lose other customers. After further checking, I logged in as a customer and I had previously left other items in my cart- I went to remove it and I got the same error there- fixed that with info from an earlier post. Now, everything is good until you push "confirm order" on the checkout confirmation page. My checkout confirmation page is ?main_page=fec_confirmation- which I believe is fast and easy checkout.

I don't know what I need to change to get this error to go away. I was only speculating! I believe that the page should be secure. I just don't know what's causing the error.

Nancy

So far, I cannot reproduce a warning on your site ...

Are you able to recreate one?

What Credit Card module are you using?

Morning Lynda~

I see where your order went though. I don't get the message if I pay by check either. If you choose to pay by CC, that's when I get it. I use skipjack for CC payments. I just put in #4111111111111111- a date in the future and some random 3 digit security code.

So, does that mean that SkipJack is the problem?

Nancy

When I pick that one, I do appear to get an error with the invalid credit card ...

You might compare the module to the other Payment modules to see what they are doing ...

Also, you might try turning off Fast and Easy Checkout to see if the same error occurs on the normal checkout with this module to help determine is this the Payment module or the Fast and Easy checkout add on ...

Could you also check the safeties on the Authorization on SkipJack site?

I am getting in the email:
Authorization failed, activity limit exceeded.

which makes me thing there may be a flag on the account number to prevent use so testing could be hard to accomplish ... :unsure:

I turned off the Skipjack payment and turned on the regular CC processing- it works fine. So it must be something on that page at skipjack - I'll talk to them tomorrow... Something to look forward to!!

Thanks!
Nancy