New SSL - Flash Player in Blank Sidebox breaking Cert

Hi All,

I am in the process of installing LinkPoint on my already-running site, and for that, I purchased a dedicated Comodo SSL cert. I had previously installed the Blank Sidebox contribution and included in there a Flash Player, as outlined in a separate thread.

I have a newly-installed SSL cert on my site (Comodo), it is mine, not a shared one. When I go to my zencart site using https://, I get a broken lock indicating that there is some unsecure content on the page. I first thought some image must be hard-coded and insecure (maybe a banner), but I realized it is this Flash Player in Blank Sidebox that I have setup.

In the code for tpl_blank_sidebox.php, I have hard-coded an absolute url for the flvplayer.swf file, that plays the flash video in a window in the sidebox (see full code below; my site address partially hidden to prevent Google searches finding this thread).

So my question is, how can I change this to keep the sidebox with flash player, but not have it break the secure page? Can I just put the flvplayer.swf file into, for example, my /public_html/images folder (or maybe in public_html/catalog/images, where my images for the ZenCart catalog are) and then change the code to a relative reference and not the absolute location? And must the sample.flv file also be moved and given a relative location as well?

Any help is much appreciated!!!

Thanks,
Pat

---

<?php /** * blank sidebox - allows a blank sidebox to be added to your site *-- * @package templateSystem * @copyright 2007 Kuroi Web Design * @copyright Portions Copyright 2003-2007 Zen Cart Development Team * @license <http://www.zen-cart.com/license/2_0.txt> GNU Public License V2.0 * @version $Id: blank_sidebox.php 2007-05-26 kuroi $ */ $content = ''; $content .= '<div id="' . str_replace('_', '-', $box_id . 'Content') . '" class="sideBoxContent">'; // Replace the text and HTML tags between the apostophes on lines 19 and 20. // Use as many or as few lines using this model as you need for your custom content. // If you have a multilingual site define your text in the languages/YOUR_LANGUAGE/extra_definitions/blank_sidebox_defines.php and include it as shown in line 19. // If your site is monolingual, you can put the text right here as shown on line 20 (and nobody will know!) $content .= '<p>' . TEXT_BLANK_SIDEBOX . '</p>'; $content .= '<object width="140" height="99" classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="http://fpdownload.macromedia.com/pub/ shockwave/cabs/flash/swflash.cab#version=8,0,0,0"> <param name="flashvars" value="file=http://www.canxxx-hd.com/sample.flv" /> <param name="movie" value="http://www.can***-hd.com/flvplayer.swf" /> <embed src="http://www.can***-hd.com/flvplayer.swf" width="140" height="99" bgcolor="#FFFFFF" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" flashvars="file=http://www.can***-hd.com/sample.flv" /> </object>'; $content .= '</div>'; ?>

Well, like many times, during the silence of no replies I was able to figure out an answer for myself... at least this made it work with no broken lock in both FireFox and IE7. I don't know if it the proper coding or just a 'band-aid', but it has made it work so that I can keep the flash sidebox and still have SSL pages work properly.

After trying several approaches, I then tried one of the easiest: keeping all the references hard-coded, but changing them to https:// rather than http://. First I tried this with just the references internal to my site (not the ones to Macromedia), that worked for FireFox but IE7 gave the "page contains secure and insecure" warning. I then changed the external references to https:// and voila, that worked! If experts here have a suggestion in case this is the wrong approach, I welcome hearing it. If not, I post this fix in the case that it will help some future user.

Here is the updated, working code for the tpl_blank_sidebox.php file:

<?php /** * blank sidebox - allows a blank sidebox to be added to your site * * @package templateSystem * @copyright 2007 Kuroi Web Design * @copyright Portions Copyright 2003-2007 Zen Cart Development Team * @license <http://www.zen-cart.com/license/2_0.txt> GNU Public License V2.0 * @version $Id: blank_sidebox.php 2007-05-26 kuroi $ */ $content = ''; $content .= '<div id="' . str_replace('_', '-', $box_id . 'Content') . '" class="sideBoxContent">'; // Replace the text and HTML tags between the apostophes on lines 19 and 20. // Use as many or as few lines using this model as you need for your custom content. // If you have a multilingual site define your text in the languages/YOUR_LANGUAGE/extra_definitions/blank_sidebox_defines.php and include it as shown in line 19. // If your site is monolingual, you can put the text right here as shown on line 20 (and nobody will know!) $content .= '<p>' . TEXT_BLANK_SIDEBOX . '</p>'; $content .= '<object width="140" height="99" classid="clsid:d27cdb6e-ae6d-11cf-96b8-444553540000" codebase="https://fpdownload.macromedia.com/pub/ shockwave/cabs/flash/swflash.cab#version=8,0,0,0"> <param name="flashvars" value="file=https://www.can***-hd.com/sample.flv" /> <param name="movie" value="https://www.can***-hd.com/flvplayer.swf" /> <embed src="https://www.can***-hd.com/flvplayer.swf" width="140" height="99" bgcolor="#FFFFFF" type="application/x-shockwave-flash" pluginspage="https://www.macromedia.com/go/getflashplayer" flashvars="file=https://www.can***-hd.com/sample.flv" /> </object>'; $content .= '</div>'; ?>