SSL Problem

Hello

Remove: "/"

<a href="https://www.securitymetrics.com/site_certificate.adp?s=92.3.135.49&i=504231"><img src="/images/sm_ccsafe_whborder.gif" alt="SecurityMetrics for PCI Compliance, QSA, IDS, Penetration Testing, Forensics, and Vulnerability Assessment" width="100" height="39"></a>

<a href="YOUR_URL"><img src="images/YOUR_IMAGE" alt="YOUR_INFO" width="XX" height="XX"></a><a href="YOUR_URL"><img src="images/YOUR_IMAGE" alt="YOUR_INFO" width="XX" height="XX"></a>

Hi royal i have now removed it but still the same issue.

I think your coding is duplicating itself or am i supposed to put the coding in twice -

here is how the coding now looks

<a href="https://www.securitymetrics.com/site_certificate.adp?s=92.3.135.49&i=504231"><img src="images/sm_ccsafe_whborder.gif" alt="SecurityMetrics for PCI Compliance, QSA, IDS, Penetration Testing, Forensics, and Vulnerability Assessment" width="100" height="39"></a>

I also looked at your site in your sig. i love the way you have removed the + sign near each thubnail - if im correct you are using image handler 2. on my site i am using the same however it shows the plus image. nt sure if there is a quick fix - think i should post in the image handler section

Hello abs007,

I'm sorry. Did you wanted to add 2 images with url? The codes for two images with url.

When I check your website in your signature I receive no errors in IE or Firefox.

I also looked at your site in your sig. i love the way you have removed the + sign near each thubnail - if im correct you are using image handler 2. on my site i am using the same however it shows the plus image. nt sure if there is a quick fix - think i should post in the image handler section

Yes, I'm using image handler. I did not remove the + sign. If you look on your top right hand side of the image. You will see the + sign.

You did not answer these questions.

Hello abs007,

Which browser do you have the problem with?

What kind of resent changes did you make?

Hi Royal
I am still getting the error in both IE and mozilla - The https kicks in when you go to login or create an account. If you click login then you are taken to the split screen of creating a new account or sign in. Once you click on the sign up button IE will give a pop up asking if you would like to view secured data only or all. In mozilla it shows a red explanation mark on the padlock.

The changes that I made was to try and add a comodo logo which i think i posted about when you first asked - I have since removed all of the html associated with it and now only have the coding pasted above.

Thanks

Hello abs007,

Found it.

When I click on "Log In" and "My Account" I had no problem until I click on "Create Account".

"Click to find" button is the problem.

ahh - do you mean the click to find for the postcode -

hmm anyway around this - we really need both. how about if i remove the coding and replace it with a link ? do you think that will sort the problem

cheers

Hello abs007

ahh - do you mean the click to find for the postcode -

Yes! That's the one.

how about if i remove the coding and replace it with a link ? do you think that will sort the problem

You can do that. But I love the button look.

What is the code you are using for the "Click to find" button?

Hi thanks for taking a look. Yeh i like the button too. it dont matter im sure i can take a screenshot and upload it to the images forlder. the only thing is that im not sure if its calling the image from a url or the images forled as it doesnt really give the image src.

anyway here is the code - i have removed my key and id

<label class="inputLabel" for="postcode">Postcode:</label>
<input type="text" name="postcode" size = "11" maxlength = "10" id="postcode" /><span class="alert">*</span><SCRIPT LANGUAGE=JAVASCRIPT SRC="http://services.postcodeanywhere.co.uk/popups/javascript.aspx?account_code=indivXXXXX&license_key=XXXXXX"></SCRIPT>

cheers

Hello abs007,

add "s". Change from http to https

<label class="inputLabel" for="postcode">Postcode:</label>
<input type="text" name="postcode" size = "11" maxlength = "10" id="postcode" /><span class="alert">*</span><SCRIPT LANGUAGE=JAVASCRIPT SRC="https://services.postcodeanywhere.co.uk/popups/javascript.aspx?account_code=indivXXXXX&license_key=XXXXXX"></SCRIPT>

Hope that works.

worked a treat - thank you ever so much for your help and time spent on helping me troubleshoot this.

Im gonna attemp to add the comodo cert image - will do it tomorrow though - If i get stuck i hope you dont mind me posting here.

If i can help with anything then please let me know - not much i know other then seo

thanks

Hello abs007,

You are very welcome!:smile:

I'm here if you need me. Take it easy.

Hi, I am using zen cart 1.38, i'm working on this site https://www.furqaanbookstore.com

I have setup the configuration files in /includes and /admin/includes to enable SSL. But when I go to checkout, it still only goes to HTTP rather than HTTPS.

Help me plsssss :no:

Hi boling brook

please check both your files

includes>configure.php you should have these set

define('HTTPS_SERVER', 'https://www.furqaanbookstore.com');

// Use secure webserver for checkout procedure?define('ENABLE_SSL', 'true');

and then in admin>includes>configure.php

define('HTTP_SERVER', 'http://www.furqaanbookstore.com');
define('HTTPS_SERVER', 'https://www.furqaanbookstore.com');
define('HTTP_CATALOG_SERVER', 'http://www.furqaanbookstore.com');
define('HTTPS_CATALOG_SERVER', 'https://www.furqaanbookstore.com');

define('ENABLE_SSL_CATALOG', 'true');
define('ENABLE_SSL_ADMIN', 'true');

you should be fine to go then

hei, it works! Now the issue is the exclamation mark "this page includes other resources which are not secure..." Is this a major concern?

I was having trouble with my SSL not working.
I found it was because I have a merchant seal in my footer.
So, I saved the merchant seal in my images folder, then did a quick jump.php page.
That fixed the SSL problem.
:clap:

Hi:

I'm running v1.3.8a with all patches and securities. I've had SSL on this site for a long time, so in includes/configure.php the following is set:

// Define the webserver and path parameters
  // HTTP_SERVER is your Main webserver: eg-http://www.your_domain.com
  // HTTPS_SERVER is your Secure webserver: eg-https://www.your_domain.com
  define('HTTP_SERVER', 'http://customironworks.com');
  define('HTTPS_SERVER', 'https://customironworks.com');

  // Use secure webserver for checkout procedure?
  define('ENABLE_SSL', 'true');

In admin/includes/configure.php, these are the settings:

define('HTTP_SERVER', 'http://customironworks.com');
  define('HTTPS_SERVER', 'https://customironworks.com');
  define('HTTP_CATALOG_SERVER', 'http://customironworks.com');
  define('HTTPS_CATALOG_SERVER', 'https://customironworks.com');

  // Use secure webserver for catalog module and/or admin areas?
  define('ENABLE_SSL_CATALOG', 'true');
  define('ENABLE_SSL_ADMIN', 'true');

Recently, the client switched to a new SSL provider (rapidSSL). They place the colored band (in Firefox) next to the favicon as well as the padlock in the status bar.

I can access the admin and the band and padlock are clear, but when I access the catalog, i get a flash of the blue bar then it disappears and the padlock has a warning of Unauthenticated Content. All images are relative, even the hand coded ones.

Does anyone know what I missed?

kp

newagekat,

Your google-analytics urchin tracking code is http

<script src="http://www.google-analytics.com/urchin.js" type="text/javascript">

Kobra:

you're a lifesaver. The client got someone to help with Marketing and page ranking. I did not realize that was there. Thank you.

Without appearing really stupid, how did you find it? I viewed source and did a search for http: and there were a lot of results, but I assumed that Zen Cart identified them as secure in some manner.

BTW, what is a jump.php? it's mentioned by customgiftsshoppe on this post.

Most of your http references are links and not excecuted The google code is a script that is http and being run on a secure page
A custom - I suppose - tpl_main_page.php in your template named for these secure pages without the google code would be an option

Kobra:

One last stupid question. I work on Mac so I'm unfamiliar with IE except to say: thank God for v8.

the certificate is now running properly and displaying the padlock and the Blue bar (in Firefox). in IE, i get this

To help protect your security, Internet Explorere has blocked this website from displaying content with security certificate errors. Click here for options...

I realize this may be a default setting in IE, but for the lay person, and there are still a lot, is there a workaround for this?