SSL not truely secure

[Silverado05]

I have some Js on my page that is keeping my SSL from being truely secrure. Instead of getting a green URL it's red and I have seem to trace it down to my Js. Can anyone tell me how to going about securing the Js so my SSL is completely secure.

 

-Thanks

[jpweber]

Keep the http:// links out of the coding of the page you're trying to secure, if possible.

 

J

[matrix2223]

If your adding a google adds there is a contrib for this. As you would need to add an else if statement in the column or where ever you are adding the adds to.

 

Eric

[Silverado05]

That's not possible. I have a block that displays the lates topics from my forum on another server. If I remove the http the code below everything is secure but the mod doesn't work.

 

<script language="JavaScript" type="text/javascript" src="http://www.texascampingforum.com/forum/topics_anywhere.php?mode=show&f=a&n=10&jlp=y&b=non"></script>

 

So is their anyways to make the entire Js secure?

 

-Thanks

[jpweber]

Find the javascript file you're linking to (###.js) and copy it to your server, if it's okay and they don't mind.

 

J

[Silverado05]

That won't work because the file is needed on the OTHER server in order for this mod to work because it goes to my phpBB forum that is on a different server. So if copy it to the server my store is on the mod won't work. Any other ideas?

[matrix2223]

the only other way is to ditch it when a ssl page comes up

[jpweber]

I don't think there is a solution to this one, if I'm not mistaken. I mean, if you have to have the http:// link, you're always going to get that nonsecure message box thing. I googled for searches to this, but come up with the same thing: no solution, yet a lot of people having the same problem:

 

http://www.google.com/search?as_q=%22nonse...amp;safe=images

[matrix2223]

there is no way that I know of to get any js to be sercure.

Sorry to be the bear of bad news

 

Eric

[Silverado05]

I don't get any error boxes or anything. Just the red URL instead of green which tells me it's not fully secure. I Just need this on my index page anyways. So how would I could about having it display on my index and not on any other pages. Index isn't secure page anyways and that's only where I need it.

 

-Thanks

[♥Monika in Germany]

That won't work because the file is needed on the OTHER server in order for this mod to work because it goes to my phpBB forum that is on a different server. So if copy it to the server my store is on the mod won't work. Any other ideas?

so you phpBB doesn't have SSL? ask your host for free shared SSL and add that ... and you're set.

[Silverado05]

My host does have it, but I have no need for SSL for a forum board. I would be back to square one because then my forum wouldn't be completely secure because of the Js on it. My store uses a SSL from GoDaddy. Securing my forum wouldn't fix this problem because they are in two different servers. Thanks though

 

Anyone know how I can just include this box on just my index?

 

-Thanks

[♥Monika in Germany]

My host does have it, but I have no need for SSL for a forum board. I would be back to square one because then my forum wouldn't be completely secure because of the Js on it. My store uses a SSL from GoDaddy. Securing my forum wouldn't fix this problem because they are in two different servers. Thanks though

 

Anyone know how I can just include this box on just my index?

 

-Thanks

I have completely lost you. Why on earth would creating a 3rd lever shared SSL domain need to be used by your board??? You set up that 3rd level domain and it just means that should you TRY to access your site by using that domain it will not give you a page not found but a secure file.

[Silverado05]

I think you have misread something somewhere as you're talking about something completely irrelivant to my problem.

 

You are suggesting I use a SSL for my phpBB board but that is pointless and no need to have a SSL on a forum board. That wouldn't solve my problem anyways.

 

I just need to do what was suggested earlier and just have the box dedicated to show in the index page and not any other pages or secure pages.

[♥Monika in Germany]

that's sad ... YOU do not follow me.

 

including the box only in index will not help you. There is redirecting to a https: version of index several times in osC.

[♥Monika in Germany]

ok last try to explain ...

 

see this cake site here ... I removed SSL for you from the catalog part of it

 

http://www.monikamathe.com/hollywood/login.php

 

click on login, no ssl, no error message

 

I have a 3rd level shared SSL for that domain of course (no admin should ever be without one).

 

so if you replace that url by

 

https://monikamathe.c2.hostexcellence.com/h...ywood/login.php

 

you get a secure page, not a page not found, no error message of any kind. The config file of that catalog has NOT been touched. this is an alias, if someone doesn't know this special url, they will never see it.

 

This is EXACTLY what you need if you want to include pages for your board into secure pages of your shop.

 

'nuff said. No need to trust me of course. ( and here I'm getting frustrated)

[Silverado05]

that's sad ... YOU do not follow me.

 

including the box only in index will not help you. There is redirecting to a https: version of index several times in osC.

 

Not while being secure though. BUT at least having it only on the index it while allow the crical pages that need to be fully secrure, secure. I.E. the checkout, my account pages, etc. Index really has no reason to be secure and on my site it's not.

 

What does having a SSL on my forum going to do though? My forum is on a completely different site and server so it wouldn't matter it it's secure or not. The problem is with the SSL not being fully secure on my store because of the http:// within the Js. Then not to mention having an SSL on my forum I would be back to square one but on my forum because it has Js links, etc on it. That's what I am trying to tell you.

[Silverado05]

ok last try to explain ...

 

see this cake site here ... I removed SSL for you from the catalog part of it

 

http://www.monikamathe.com/hollywood/login.php

 

click on login, no ssl, no error message

 

I have a 3rd level shared SSL for that domain of course (no admin should ever be without one).

 

so if you replace that url by

 

https://monikamathe.c2.hostexcellence.com/h...ywood/login.php

 

you get a secure page, not a page not found, no error message of any kind. The config file of that catalog has NOT been touched. this is an alias, if someone doesn't know this special url, they will never see it.

 

This is EXACTLY what you need if you want to include pages for your board into secure pages of your shop.

 

'nuff said. No need to trust me of course. ( and here I'm getting frustrated)

 

 

 

I know exactly what you are saying. You are saying take the URL within the Js that is pulling the data from my forum and make it a secrure URL like

 

https://secure.bluehost.com/~txcampin/texas...jlp=y&b=non

 

That won't work because it won't allow the Js script to work. It's like having a window that is painted black.

[♥Monika in Germany]

http://www.texascampingforum.com/forum/top...jlp=y&b=non

 

3rd level domain enabled for this site?

THIS gives a page not found, so nom, not enabled. cannot work.

https://secure.bluehost.com/~txcampin/texas...irect=index.php

[Silverado05]

http://www.texascampingforum.com/forum/top...jlp=y&b=non

 

3rd level domain enabled for this site?

THIS gives a page not found, so nom, not enabled. cannot work.

https://secure.bluehost.com/~txcampin/texas...irect=index.php

 

 

That is not an actual working URL, it was just for example purposes to display I knew you were trying to say. That's why it doesn't work. I don't like posting actual working links to my sites on forums if I don't have to.

 

I have fixed the problem anyways, Thanks though.

[c_karsan]

That is not an actual working URL, it was just for example purposes to display I knew you were trying to say. That's why it doesn't work. I don't like posting actual working links to my sites on forums if I don't have to.

 

I have fixed the problem anyways, Thanks though.

 

Hello Silverdo,

 

how did you find the solution for this? it might help a problem i have been having recently with js.

 

Cheers

[Silverado05]

I used XML instead. This worked for my isntance but I don't know what your Js is being used for.

[Prospector]

How do you secure your Admin with the SSL connection?

[♥Monika in Germany]

How do you secure your Admin with the SSL connection?

Norm,

 

you change your admin config file to SSL and specify the SSL url for the top 3 entries

 

then you change your admin .htaccess file adding a redirect to SSL ... but this is not necessary, if you omit it the non-SSL call will give you a page not found. Hence admin can only be accessed via SSL call