STS configuration (IMHO).

[yguyon]

I get this message about when I go to my shopping cart and my account on my web site http://www.metrodecals.com/index.php

 

This page contains both secure and nonsecure items.

 

I believe my image are hard coded and I'm not sure how to fix this. I was told to update my html file but I don't have any file like that.

 

 

Any tips on how to fix this I understand what my problem is but I have no clue on what file to look at and change :(

 

I found a few solution bellow and I'm not sure what to do.

 

Julie ;)

 

:(

 

 

Okay I think I've found the culprit for all you win32 people that are having a problem with the ssl giving you that warning about displaying nonsecure etc when switching over to secure page.

 

The culprit is the "getenv('HTTPS')" for the

 

<base href="<?php echo (getenv('HTTPS') == 'on' ? HTTPS_SERVER : HTTP_SERVER) . DIR_WS_CATALOG; ?>">

 

on all the various pages. Apparently if you use the sapi/isapi php module for apache OR IIS, then the getenv() function does not work. I found this out with my dealings with displaying the parse times on the bottom of the page.

 

Simply do a search for

getenv('HTTPS')

and replace with

$_SERVER["HTTPS"]

 

Hope this helps someone that still has hair left!

 

A other solution is (from the german forum):

replace the base href om all pages with:

base href="<?php echo (ereg('^https', $SCRIPT_URI) ? HTTPS_SERVER :

HTTP_SERVER) . DIR_WS_CATALOG; ?>"

Cu Henri

 

configure.php to cover this:

CODE

if ($request_type = 'SSL'){

define('DIR_WS_IMAGES', 'https://my.secureserver.com/~user/pathto/mycatalog/images/');

} else {

define('DIR_WS_IMAGES', 'images/');

}