Secure & Non-Secure Items with IE

While testing my site in IE6 & IE7, the common alert box "This page contains both secure and non-secure items. Do you want to display non-secure items?" comes up. If you choose no, everything but the images are displayed leading me to believe that the images are in some way excluded from the SSL connection.

The problem is, if people click on display all (secure and non-secure) than the secured lock icon in the browser disappears!

Does anyone know why my images are causing this and what I can do to make the entire page "secure" and keep the confidence-inspiring lock icon?

Thanks,

Andrew

Searching for that error message in the FAQs area brings up this article:
https://www.zen-cart.com/tutorials/index.php?article=150

That was the problem, thanks for the tip!

I understand fully what causes this error, but I am very stumped as to what element is doing this to a site I recently relaunched - http://www.healthbeyondhype.com

Any ideas what is being pulled into the page insecurely? This appears on every single page viewed in https mode.

What if you temporarily remove your google analytics code from your footer as a test?

I thought of that and had tried it. Even when I remove it, the insecure/secure error still shows in IE.

Not sure exactly what this means, but when I click on 'Home' from the signup page,it still shows as https://www.healthbeyondhype.com - may be a linking error. As I understand it, just the Create account and Checkout pages should be secured.

DrByte:

Searching for that error message in the FAQs area brings up this article:
https://www.zen-cart.com/tutorials/index.php?article=150
Hello,

I have the same problem. The pop up window with secure and non-secure items appears and when I click on 'no', the lock icon displays and clicking on 'yes' makes it disappear. I contacted the GEOTRUST tech support and they told me some of the webpages have non-secure image links which is causing this. I changed the "http" to "https" in the define_mainpage file in the define pages editor in the tools menu. As soon as I did this the whole text disappeared. and when I checked the home page the flash image was gone and the define_main page had no content in it. I checked the define_main page on my server : /includes/languages/english/html_includes/define_mainpage.php and there was no content there either. So I copied the content from my backup file and pasted it in both the files - one in the define pages editor in the admin panel under tools/define pages editor and the other one on my server after changing the permisssions to 755, but each time I copy it doesn't save in both the files. I don't know why this is happening. I also requested my hosting company to instal the ssl certificate properly and they told me they have fixed the problem by editing the .htaccess file, but nothing happened and it is still the same. Following is the content of the define_mainpage file :

<div align="center"> <object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,29,0" width="315" height="579"> <param name="movie" value="includes/templates/Slovak_Classic/images/WithBg.swf">" <param name="movie" value="includes/templates/Slovak_Classic/images/WithBg.swf">" <embed src="includes/templates/Slovak_Classic/images/WithBg.swf" quality= "high" pluginspage="http://www.macromedia.com/go/getflashplayer" type="application/x-shockwave-flash" width="315" height="579"></embed> <param name="quality" value="high"><param name="BGCOLOR" value="#000000"> <param name="menu" value="false"> </object>

"WithBg.swf" is my flash file on the index page.
I would really appreciate your help very much.

thanks

Indicana

Could somebody please help me. Now I am not able to upload or modify any products in my categories in the admin. The pop up window shows in the admin too. I feel at a loss. Any help would be appreciated.

Thanks

Indicana

The URL of the site you're having the error on would be a help.

DrByte:

The URL of the site you're having the error on would be a help.
Hello Dr. Byte,

Thanks for your response. The URL is http://www.indicana.com. Now the pop up box (want to display secure and non secure items)appears in the admin panel too. And when I upload or modify any products they don't get saved and it says "product disabled". It will be great if you could help me out.

thanks

Indicana

I can't see the error message you reported anywhere on your storefront.

Why are you running your entire site in SSL?
I think you've got a weird problem happening because you've forced your site to always show up with an https address.

DrByte:

I can't see the error message you reported anywhere on your storefront.

Why are you running your entire site in SSL?
I think you've got a weird problem happening because you've forced your site to always show up with an https address.
Hi,

It is my hosting company who did that. I didn't ask them to do so. So what should I do now and what is the next step? It is taking forever now to log into my admin and I am facing all those problems I mentioned in my earlier messages - not able to modify or upload products too. Please help.

thanks

Fouzia

indicana:

Hi,

It is my hosting company who did that. I didn't ask them to do so. So what should I do now and what is the next step? It is taking forever now to log into my admin and I am facing all those problems I mentioned in my earlier messages - not able to modify or upload products too. Please help.

thanks

Fouzia
By the way there is no error message on my website. I mentioned earlier that a pop up box appears when you visit my website which says: " this website contains secure & non secure items, do you want to display the non secure items", and when you click on 'yes' the lock up icon does not display and when you click on 'no' the lock icon appears on the address bar.

Indicana

The secure/non-secure error is being caused by the 'Validation' icon in your footer - I see it on every page (IE7).

You might want to check your two configure.php files to see if you have the correct path information - your whole site shouldn't be under SSL.

stevesh:

The secure/non-secure error is being caused by the 'Validation' icon in your footer - I see it on every page (IE7).

You might want to check your two configure.php files to see if you have the correct path information - your whole site shouldn't be under SSL.
Hi,

Could you please be a bit more clear as to how the correct path information should be? As regards running my whole site in SSL my host is not willing to secure just the login and check out pages. They tell me that they can instal the certificate for the whole website only. I just don't understand how I can solve this problem. any help would be appreciated.

thanks

indicana

That's right - your host installs the SSL certificate for the whole site, and Zencart, when configured properly, does the rest.

Check out this:

https://www.zen-cart.com/tutorials/index.php?article=14

stevesh:

That's right - your host installs the SSL certificate for the whole site, and Zencart, when configured properly, does the rest.

Check out this:

https://www.zen-cart.com/tutorials/index.php?article=14
Hi Stevesh,

I did exactly what is said in the tutorial: Your Own Certificate
Change includes/configure.php and admin/includes/configure.php to:

// Define the webserver and path parameters
define('HTTP_SERVER', 'http://www.YOUR_SHOP.com');
define('HTTPS_SERVER', 'https://www.YOUR_SHOP.com');
define('ENABLE_SSL', 'true');

do I have to reinstal the certificate? So how do I do that - change the config. php files to https only after my host reinstals the ssl? Why is my admin behaving like this: the define_main page.php file in the admin/tools cannot be edited & saved; I cannot upload or change the products in the categories. Will everything be back to normal once I reinstal the SSL? I appreciate your help.

thanks

indicana

Looks to me like your site is now operating properly, SSL-wise.

You still have the secure/non-secure error on the login page, caused by the W3C logo at the bottom - I'd just remove that if it were me.

stevesh:

Looks to me like your site is now operating properly, SSL-wise.

You still have the secure/non-secure error on the login page, caused by the W3C logo at the bottom - I'd just remove that if it were me.
Hi Stevesh,

thanks for your response. Yes, you are right. the ssl is now working properly except for the login page. My host atlast agreed to fix it when I told him to contact the administrators and solve the problem. The W3C logo at the bottom...... I don't know how to remove it. Could you please tell me in which file I can locate the logo and erase it?

thanks once again

Indicana