+ Reply to Thread
Results 1 to 6 of 6

Thread: nonsecure items on https page

  1. #1
    TroyL is offline New Bee
    Join Date
    Mar 2008
    Posts
    3
    WHB Points this Month
    0.00
    WHB Points
    0.00
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Default nonsecure items on https page

    I am having a strange issue with an oscommerce install with ssl. On my https pages I am getting an error message stating there are secure and nonsecure items on my page, but this error is on Firefox, Chrome and Opera but NOT on IE 7 or 8. Spent time on the OSCommerce forum and there are no nonsecure image or script links and all my files are configured correctly (to the best of my knowledge). Could this be a cert problem? My cert is from Comodo (EssentialSSL CA, COMODO CA Limited) There was initially some issues with installing the cert as it needs an intermediate file to work properly. The link to my secured page is: https://howardsfinefoods.com/login.php Any thoughts would be greatly appreciated.

  2. #2
    Maxim M.'s Avatar
    Maxim M. is offline WeeHBie
    Join Date
    Sep 2008
    Location
    Kharkiv, UA
    Posts
    545
    Servers
    webhostingbuzz.com
    WHB Points this Month
    5.00
    WHB Points
    55.00
    Thanks
    14
    Thanked 3 Times in 3 Posts

    Default

    When I go to https://howardsfinefoods.com/login.php and click 'New Products' it is showing
    http://howardsfinefoods.com/products_new.php , a non-secure page. And there are lots of http links there.
    Last edited by Maxim M.; 09-09-2009 at 11:58 PM.

  3. #3
    Alan B's Avatar
    Alan B is offline Super Moderator
    Join Date
    Jul 2007
    Location
    Toronto, Canada
    Posts
    1,386
    WHB Points this Month
    0.00
    WHB Points
    290.00
    Thanks
    0
    Thanked 5 Times in 5 Posts

    Default

    Many browsers pop up warnings about "mixed content": a page that includes content from both https and http connections. To avoid such warnings, all content intended to be served to secure pages should come from secure connections via https.
    I am not WHB staff and I am not paid.
    I provide help in these forums on my own time.

  4. #4
    Wayne R.'s Avatar
    Wayne R. is offline WeeHBie
    Join Date
    Jul 2007
    Posts
    145
    WHB Points this Month
    0.00
    WHB Points
    0.00
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Default

    Troy,

    Check your code for the page, there are several requests for images which do not exist (namely images/img_tal1.gif, tal2.gif, tal3.gif, tal4.gif, and some others), and these return a 404 page which is not https.
    I don't see any other issues though offhand, so fix those bad requests and see what happens then. I'm sure it is not a certificate issue though.

    Just having links to http pages wouldn't cause the error (but I imagine at some point you'll config OSCommerce to use all https).
    Wayne Reavill
    WebHostingBuzz CIO

  5. #5
    TroyL is offline New Bee
    Join Date
    Mar 2008
    Posts
    3
    WHB Points this Month
    0.00
    WHB Points
    0.00
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Default

    Wayne R,

    Thanks for the tip, I was able to track down the offending image and the problem is resolved. Learned something new out of this. Your a genius!
    Last edited by TroyL; 09-10-2009 at 10:48 AM.

  6. #6
    carlobee is offline Member
    Join Date
    Jul 2009
    Posts
    41
    WHB Points this Month
    0.00
    WHB Points
    0.00
    Thanks
    0
    Thanked 0 Times in 0 Posts

    Default

    wow. learned something from this too! thanks


+ Reply to Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts