Secure and unsecure items...? =(

[jfo9696]

Hey how's it going everyone? how do I go about securing item on my page I have some that are secured and some that aren't I need some help with that.

 

 

https://www.jetsfloridaoutdoors.com

 

 

Thank you in advance

[Guest]

have you used the method

 

<?php echo tep_image(DIR_WS_IMAGES . $image, HEADING_TITLE, HEADING_IMAGE_WIDTH, HEADING_IMAGE_HEIGHT); ?>

 

to show all your images. if so I believe they should be secure.

[FIMBLE]

its you front door page that is causing you the problem, but then how come it is all ssl on your site?

[jfo9696]

have you used the method

 

<?php echo tep_image(DIR_WS_IMAGES . $image, HEADING_TITLE, HEADING_IMAGE_WIDTH, HEADING_IMAGE_HEIGHT); ?>

 

to show all your images. if so I believe they should be secure.

 

 

how do I go about that? Iam not too familiar with OSC!?

[germ]

Look in your /store/includes/header.php for this line:

 

	<th valign="middle" align="right" background="http://jetsfloridaoutdoors.com/store/images/main_logo_bg_everglades2.jpg"><img src="images/main_logo_right.png" border="0" alt="" width="459" height="100"></th>

Change it to:

 

	<th valign="middle" align="right"><img src="images/main_logo_right.png" border="0" alt="" width="459" height="100"></th>

That background image I removed from the code doesn't exist on your site.

 

I was helping you in another thread with this....

<_<

 

Better make a backup before editing.

[jfo9696]

Yeah is just that I finely went into my site using ie 7.0 and is showed to have unsecured items and I figure you had given up on me.lol I'm a work in progress I promise

[jfo9696]

ok so I have done the code altering that you had told me, but i am still getting unsecured items AHHH. now I have noticed that if i use HTTP:// I do not get the error. But if you were to use HTTPS:// i do get the error ( through Internet Explorer 7.0) Firefox no problem.

[jfo9696]

how come I can not access none of my comand meny from OSC it gives me 404 error I have everything backed up but no luck with any of the changes

[germ]

We finally got the "non-secure items" popup out of your catalog, but it looks like you turned your SSL off?

:unsure:

[jfo9696]

how would I have turn the ssl off? or better yet how do we turn it back on?

[germ]

It's back on now.

 

But that background image is back in your code (the one I mentioned in this thread), so the "non secure items" popup is back as well.

 

But now all your categories are HTTPS!!!

 

Not good!!!

 

Major search engines (like Google) don't index HTTPS pages.

 

In your /shop/includes/configure.php make the defiine to HTTP_SERVER simply http:// not https://

[formula1]

It's back on now.

 

But that background image is back in your code (the one I mentioned in this thread), so the "non secure items" popup is back as well.

 

But now all your categories are HTTPS!!!

 

Not good!!!

 

Major search engines (like Google) don't index HTTPS pages.

 

In your /shop/includes/configure.php make the defiine to HTTP_SERVER simply http:// not https://

 

Sorry to hijack this thread, but it save creating a new one..

 

I am having a similar problem to this one, only buyers are sent to the https:// when they go to the check out stage, yet for some strange reason I am getting the 'both secure and unsecure items shown' this resulting the padlock symbol not showing. Any ideas what could be causing this.

 

When I click not to show unsecured items it none of the images are showing, so i am assuming its the image files that are causing these problems, yet i have no idea what to do to sort it out. It was fine when the whole cart was behind the ssl, but as pointed out before search engines wont go behind the ssl and its not good to have the whole cart under ssl.

 

so any help would be appreciated.

 

 

thanks

[germ]

This can't be solved without looking at the HTML source for your site.

 

Post your URL or PM it to me if you want me to try to help.

[formula1]

http://www.f1products.co.uk/index.php is the url,

 

I have changed:

// set the type of request (secure or not)
//  $request_type = (getenv('HTTPS') == 'on') ? 'SSL' : 'NONSSL';
 $request_type = ($HTTP_SERVER_VARS['SERVER_PORT'] == '443') ? 'SSL' : 'NONSSL';

 

that seems to have allowed the images to show, but I am still getting the error message when trying to do any thing past create account. I think i have removed all outside links (including oscommerce, will put this back as soon as its sorted)

 

So any help is greatly appreciated.

[germ]

HREF links won't cause the message, just content (scripts or images usually) from non-secure sources.

 

I've been up and down your code and CSS file.

 

The only non-secure content I can find is in the code for your SWF file.

 

Try changing this:

 

codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,0,0"

to

 

codebase="https://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,0,0"

[satish]

HTTPS points that will answer most questions:

1)Spiders do not crawl thru SSL pages.Means making SSL a complete site is going to result in weak search engine or zero search engine presence.

 

2)Login,create account and chekout pages(where You do have Your members info should be in SSL).

3)SSl pages are com,paratively slower to download.

4)defin SSL as true and https server with Your https://www.site....com

6)If shared SSL then dont using cookies as this will not work.Only a session ID will help.

 

If any one wants to add to do this list please do.

 

Satish

[jfo9696]

Ok so my ssl is on a the image is taken care off. however if I go to my site http://jetsfloridaoutdoors.com/store and I look around and click on any categories i'm fine but once i click again in a different categorie the secure non secure item comes back as an https. anyone with any good advise?

[germ]

Looking at the HTML source, this is the cause:

 

<script type="text/javascript" src="http://www.jetsfloridaoutdoors.com/store/textsizer.js">

You're getting content from a non-secure source on a secure page.

 

Should be:

 

<script type="text/javascript" src="https://jetsfloridaoutdoors.com/store/textsizer.js">