SSL problem - this page contains both secure and nonsecure items

I am having problems with a css/js drop down menu I have placed in the cart when it comes to https pages. I get the following message:

this page contains both secure and nonsecure items

Searching various forums on the web this seems to be a common problem, although I couldn't find an answer to fix my problem.

<script type="text/javascript" src="https://www.website.com.au/menu/menu.js"> </script>

Now with this above line, if I remove it, I no longer get the message, but the the drop down part of the menu doesn't function. I had thought perhaps something in the js file was causing this issue, but after I deleted the entire contents of the js file and uploaded the blank file, the same problem still occured.

Any ideas how to fix this?

Howdy Andrew,

Usually, that error indicates that your are requesting an image etc. from a non-secure location. To be a bit more clear, from an http:// vs. https:// . In this case I see that https:// www dot websites dot com dot au is throwing an error. So, they probably don't have an SSL Certificate installed or it's installed incorrectly.

If you have further questions on this, put a url up for your site. I can look deeper.

Paul

Off topic,

Whats with the .com.au? Does Austrailia have it's own hierarchy or something?

birdoasis:

Off topic,

Whats with the .com.au? Does Austrailia have it's own hierarchy or something?

sure does. most countries do I think if not all, even the US I believe has one now? (not positive on that though)

fourbit:

Howdy Andrew,

Usually, that error indicates that your are requesting an image etc. from a non-secure location.

Paul

Hey Paul.

Thanks for your reply. That is what I had also initially thought. I really don't think that is the case here though as in my trouble shooting I took out any related images to the page. (all images go through the main stylesheet by the way) Even when the images are showing, but the reference to a js file is not, this message doesn't come up.

http://hathor.instanthosting.com.au/~direc731/index.php (click on the login page and it will take you to a secure page)

Hi Andrew,

I was a bit confusing. Sorry. :(

What I was trying to say was that it appears that this domain www. website.com.au doesn't have an SSL cert installed or it's incorrectly installed so, your link to the https://www. website.com.au/menu/menu.js for the java script is causing the error.

However, I looked at your site, and I see a different '<script 'code . And the src= in it is pointing to http://www. your-domain-name . Your problem is definitely there.

It is possible to put a switch in there, or you can make it more dynamic in the header code. Or, you can just change it to https:// leave it at that. :D

Paul

Change from:

to:

The above uses a Relative link which should eliminate your problem. It also presumes the JS code is within your account. If not you should put it within your account. :wink:

Very well put, Rob.

I missed the 'relative' option. Sometimes I'm a bit in the mud.

I pm'd him with the full urls. So, between those two options, he'll have it working. :D

Website Rob:

Change from:

<script type="text/javascript" **src="https://www.website.com.au/menu/menu.js"**> </script>

to:

<script type="text/javascript" **src="/menu/menu.js"**> </script>

The above uses a Relative link which should eliminate your problem. It also presumes the JS code is within your account. If not you should put it within your account. :wink:

Hi Rob, thank you for that! I have used the relative link option and still face the same problem.

What I did just find though is that there is an additional piece of javascript code at the in the page which helps control the menu which actually may be the cause.

<script type="text/javascript">

cssdropdown.startchrome("menu")

</script>

I am fairly sure that the ssl certificate is working correctly, as previously I used another dhtml/js menu for this site and it worked fine with the ssl. I had to change it though as it was making the page extremely slow to load.

Check the coding for the JS script and make sure the URL for 'src' is also using a Relative link. Also make sure there are no 'off-site' links as that will cause the same type error.

Other than that, you would need someone to investigate further.

Hi Rob. I have gotten around this by replacing this menu with the CSS Flyout Header Mod.

Thank you and I appreciate you taking the time to look into this.