ssl installed and working but images not showing

[codieskid]

hi there

 

my website was working fine until recently and then one day the images wouldn't show and the site is displaying the unsecure message when accessing it via https://

 

Does anyone know why my site might be doing this and how to solve the problem. You can see the site here: https://www.rccarshop.co.uk/catalog

 

Many thanks

 

Trevor

[Guest]

hi there

 

my website was working fine until recently and then one day the images wouldn't show and the site is displaying the unsecure message when accessing it via https://

 

Does anyone know why my site might be doing this and how to solve the problem. You can see the site here: https://www.rccarshop.co.uk/catalog

 

Many thanks

 

Trevor

I can see them in IE6. I do not get the security warning, but your site does not go to https when I go to the create account page. Have you tried different browsers.

[codieskid]

I can see them in IE6. I do not get the security warning, but your site does not go to https when I go to the create account page. Have you tried different browsers.

 

 

try clicking on one of the products on the homepage using https:// do you then get the security message

[Guest]

try clicking on one of the products on the homepage using https:// do you then get the security message

No, no message, no padlock, all images present.

[codieskid]

No, no message, no padlock, all images present.

 

hmm thats really weird. I am using IE 6.0.2 and it brings up an error message.

 

The weird thing is if i go to https://www.rccarshop.co.uk the padlock icon appears and the site works ine.

 

as soon as i go https://www.rccarshop.co.uk/catalog I get and messgae saying i am leaving a secure website and the padlock dissappears

[Guest]

hmm thats really weird. I am using IE 6.0.2 and it brings up an error message.

 

The weird thing is if i go to https://www.rccarshop.co.uk the padlock icon appears and the site works ine.

 

as soon as i go https://www.rccarshop.co.uk/catalog I get and messgae saying i am leaving a secure website and the padlock dissappears

The padlock is there.

 

www.rccarshop.co.uk/catalog does not need ssl

www.rccarshop.co.uk/catalog/create_account.php does need ssl but it is not there. My guess is that you have not changed your admin and catalog /includes/configure.php files

[OSSamm]

The padlock is there.

 

www.rccarshop.co.uk/catalog does not need ssl

www.rccarshop.co.uk/catalog/create_account.php does need ssl but it is not there. My guess is that you have not changed your admin and catalog /includes/configure.php files

 

 

I just quickly looked so this may or may not be the problem. It seems that you are talking about the partially encrypted connection this happens when you pull data from another domain, such has a google analytics tracking code. The code pulls from google.com even though your domain is

www.rccarshop.co.uk/ in your case however I think it is complaining about all the images that content that is coming form http://www.rccarshop.co.uk/ vs https://www.rccarshop.co.uk/ if you on a secure page every thing on that page should be secure, just a general rule of thumb.

 

Let me know if this helps!

[codieskid]

So it sounds as though the pages on my site are secure and working fine but the content might be being pulled from a non secure source which produces the error message?

 

I have too also just noticed that the majority of the links on https:// seem to be then going to http:// when you click them.

 

This makes me think that there is something I have not set right in both the configure.php files as the pages should be linking to the relative locations and not back to http://

 

As for the images when i right click on those via https://www.rccarshop.co.uk/catalog they also appear to be coming from http://

 

Ill post up my configure.php files and if someone can have a quick check to see if I am doing something wrong that would be great.

[codieskid]

catalog/includes/configure.php

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'http://www.rccarshop.co.uk'); // eg, http://localhost - should not be empty for productive servers

define('HTTPS_SERVER', 'http://www.rccarshop.co.uk'); // eg, https://localhost - should not be empty for productive servers

define('ENABLE_SSL', true); // secure webserver for checkout procedure?

define('HTTP_COOKIE_DOMAIN', 'www.rccarshop.co.uk');

define('HTTPS_COOKIE_DOMAIN', 'www.rccarshop.co.uk');

define('HTTP_COOKIE_PATH', '/catalog/');

define('HTTPS_COOKIE_PATH', '');

define('DIR_WS_HTTP_CATALOG', '/catalog/');

define('DIR_WS_HTTPS_CATALOG', '/catalog/');

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

 

define('DIR_WS_DOWNLOAD_PUBLIC', 'pub/');

define('DIR_FS_CATALOG', '/var/www/vhosts/rccarshop.co.uk/httpdocs/catalog/');

define('DIR_FS_DOWNLOAD', DIR_FS_CATALOG . 'download/');

define('DIR_FS_DOWNLOAD_PUBLIC', DIR_FS_CATALOG . 'pub/');

 

 

 

 

catalog/admin/includes/configure.php

 

// Define the webserver and path parameters

// * DIR_FS_* = Filesystem directories (local/physical)

// * DIR_WS_* = Webserver directories (virtual/URL)

define('HTTP_SERVER', 'http://www.rccarshop.co.uk'); // eg, http://localhost - should not be empty for productive servers

define('HTTP_CATALOG_SERVER', 'http://www.rccarshop.co.uk');

define('HTTPS_CATALOG_SERVER', '');

define('ENABLE_SSL_CATALOG', 'false'); // secure webserver for catalog module

define('DIR_FS_DOCUMENT_ROOT', '/var/www/vhosts/rccarshop.co.uk/httpdocs/catalog/'); // where the pages are located on the server

define('DIR_WS_ADMIN', '/catalog/admin/'); // absolute path required

define('DIR_FS_ADMIN', '/var/www/vhosts/rccarshop.co.uk/httpdocs/catalog/admin/'); // absolute pate required

define('DIR_WS_CATALOG', '/catalog/'); // absolute path required

define('DIR_FS_CATALOG', '/var/www/vhosts/rccarshop.co.uk/httpdocs/catalog/'); // absolute path required

define('DIR_WS_IMAGES', 'images/');

define('DIR_WS_ICONS', DIR_WS_IMAGES . 'icons/');

define('DIR_WS_CATALOG_IMAGES', DIR_WS_CATALOG . 'images/');

define('DIR_WS_INCLUDES', 'includes/');

define('DIR_WS_BOXES', DIR_WS_INCLUDES . 'boxes/');

define('DIR_WS_FUNCTIONS', DIR_WS_INCLUDES . 'functions/');

define('DIR_WS_CLASSES', DIR_WS_INCLUDES . 'classes/');

define('DIR_WS_MODULES', DIR_WS_INCLUDES . 'modules/');

define('DIR_WS_LANGUAGES', DIR_WS_INCLUDES . 'languages/');

define('DIR_WS_CATALOG_LANGUAGES', DIR_WS_CATALOG . 'includes/languages/');

define('DIR_FS_CATALOG_LANGUAGES', DIR_FS_CATALOG . 'includes/languages/');

define('DIR_FS_CATALOG_IMAGES', DIR_FS_CATALOG . 'images/');

define('DIR_FS_CATALOG_MODULES', DIR_FS_CATALOG . 'includes/modules/');

define('DIR_FS_BACKUP', DIR_FS_ADMIN . 'backups/');

[codieskid]

bump

 

does anyone have any ideas as to whats wrong with the site? I think it must be that I have not set the image or catalog paths correctly for https:// in configure.php

 

If someone can point out what I need to change that would be very helpful

[Guest]

bump

 

does anyone have any ideas as to whats wrong with the site? I think it must be that I have not set the image or catalog paths correctly for https:// in configure.php

 

If someone can point out what I need to change that would be very helpful

As I said, I did not see it, but I am not using IE7.

 

I really do not think that it is ssl.

[Rob.Ace]

The https address in configure.php is wrong, but I don't know if that's it alone. Like Coopco said, it doesn't appear to be ssl.

 

On my server I had problems with not seeing images when it was in ssl mode, normal was fine. I had disabled image hotlinking via cpanel and did not add https://servername.com. Cpanel saw this as an external site trying to get at my images and wouldn't allow them to load. I simply added https://servername.com to the list of approved websites and everything was fine.

[codieskid]

The https address in configure.php is wrong, but I don't know if that's it alone. Like Coopco said, it doesn't appear to be ssl.

 

On my server I had problems with not seeing images when it was in ssl mode, normal was fine. I had disabled image hotlinking via cpanel and did not add https://servername.com. Cpanel saw this as an external site trying to get at my images and wouldn't allow them to load. I simply added https://servername.com to the list of approved websites and everything was fine.

 

 

I actually read this yesterday somewhere else so maybe its that thats causing the problem. My hosting is with Media temple so i don't kow if anyone else has experienced the same problem with a site hosted by them. Also the site was working fine for a while and then the error message seemed to appear just randomly one day so perhaps it is a hotlinking issue. Ill report back once i have checked the control panel.

[codieskid]

I have just checked the site with IE 7 and I get an error message when going to the homepage stating that there are non secure items on the page. If i then tell IE to only display the secure items all I get is the page without any styling or images. Is this due to the fact that the the secure page is pulling files from the non secure http:// and therefore just not displaying anything it uses from http://?

 

If this is the case all my images, css etc all reside in the http:// folder on my server which should I believe is the default location that oscommerce sets up when you install a oscommerce site.

 

So my question is do i need to migrate all the files from http:// to https://? I would'nt have thought this would be the best way of working as most sites only include a limited number of secure pages for payment and register details etc so it seems a bit extreme to put all the files on https://. So then finally is this a hotlinking issue and if so by adding http:// as a secure site in the safe list of my hosting server will the browser see files such as images, flash, css etc as safe?

 

This is really confusing as the site was working fine and was accessing files on http:// from secure pages and then just suddenly stopped working. If someone has a solution then I would be very grateful.

 

thanks again

 

Trev

[codieskid]

Hi again

 

I have just had a reply from Media temple who are my hosting company. They have told me that to resolve this issue I need to either move all my files to the https directory (which i don't want to do) or to not use absolute paths for my images such as http://mywebsite.com/http/images/ but use /images instead.

 

I don't know what you think but I assumed thats what the site was already linking to the images via configure.php but i might be wrong. Does anyone have any ideas as I really don't want to copy everything to the https:// directory as surely my admin control panel will still continue to publish just images to http:// plus it means keeping to copys of everything on the server which isn't that practical.

 

Thanks

 

Trevor

[Guest]

The https address in configure.php is wrong, but I don't know if that's it alone. Like Coopco said, it doesn't appear to be ssl.

 

On my server I had problems with not seeing images when it was in ssl mode, normal was fine. I had disabled image hotlinking via cpanel and did not add https://servername.com. Cpanel saw this as an external site trying to get at my images and wouldn't allow them to load. I simply added https://servername.com to the list of approved websites and everything was fine.

Did you fix the configure.php files as suggested by 'Rob.Ace'

eg

define('HTTPS_SERVER', 'https://www.rccarshop.co.uk'); // eg, https://localhost - should not be empty for productive servers

if that is what matches your certificate.

[Guest]

I have just checked the site with IE 7 and I get an error message when going to the homepage stating that there are non secure items on the page. If i then tell IE to only display the secure items all I get is the page without any styling or images. Is this due to the fact that the the secure page is pulling files from the non secure http:// and therefore just not displaying anything it uses from http://?

 

If this is the case all my images, css etc all reside in the http:// folder on my server which should I believe is the default location that oscommerce sets up when you install a oscommerce site.

 

So my question is do i need to migrate all the files from http:// to https://? I would'nt have thought this would be the best way of working as most sites only include a limited number of secure pages for payment and register details etc so it seems a bit extreme to put all the files on https://. So then finally is this a hotlinking issue and if so by adding http:// as a secure site in the safe list of my hosting server will the browser see files such as images, flash, css etc as safe?

 

This is really confusing as the site was working fine and was accessing files on http:// from secure pages and then just suddenly stopped working. If someone has a solution then I would be very grateful.

 

thanks again

 

Trev

How can you put your images into https://

Get your webhost to give you a rundown on how to do this.

[codieskid]

How can you put your images into https://

Get your webhost to give you a rundown on how to do this.

 

 

They said to literally copy everything from the httpdocs to the httpsdocs directory. But I really don't want duplicates of folders on the server

[codieskid]

Did you fix the configure.php files as suggested by 'Rob.Ace'

eg

define('HTTPS_SERVER', 'https://www.rccarshop.co.uk'); // eg, https://localhost - should not be empty for productive servers

if that is what matches your certificate.

 

 

So do I need to define both the https address' in both configure files to be https://www.rccarshop.co.uk ?

I did change one the other day and didn't notice any difference but it may have been that I didn't update both configure files. Ill try this next and see what happens.

 

Thanks

 

trev

[Guest]

So do I need to define both the https address' in both configure files to be https://www.rccarshop.co.uk ?

I did change one the other day and didn't notice any difference but it may have been that I didn't update both configure files. Ill try this next and see what happens.

 

Thanks

 

trev

Yes, do both files.

[codieskid]

Thanks everyone

 

I changed the configure files and that seems to have done the trick. Now the website runs everything on either http:// or https:// but when you pay for something automatically defaults to a https:// page which is great.

 

If anyone wouldn't mind spending 2 minutes making sure the site seems to be working that would be great.

 

http://www.rccarshop.co.uk/catalog

 

Thanks again

 

Trev