Ready for Google SSL - Image Problem

[webzavi]

A customer just advised us the youtube videos are not showing on our site.

It seems that the embed code in full description field all pointed to http://www.youtube...

I had to change them all to https://www.youtube...
then it worked.

Sitewide SSL = make sure old http:// embedded code are changed to https://

When you reference links outside that may or may not be SSL to keep browsers happy exclude http or https

Example

So you reference a link as so <a href="//websitename.co.uk/page.html">link text</a> Browsers will fill in blank themselves

[zgap111]

A customer just advised us the youtube videos are not showing on our site.

It seems that the embed code in full description field all pointed to http://www.youtube...

I had to change them all to https://www.youtube...
then it worked.

Sitewide SSL = make sure old http:// embedded code are changed to https://

[zgap111]

Great to see the site works

Firefox gives a green padlock
IE11 gives a padlock
Chrome doesn't... - probably the favicon needs fixing

Also, I incorrectly clicked on the link to the image file and still got a 403 error = ?
- sometimes the image would show, and when you "F5", it would be 403 again.
- still something wrong

But the site seems to work better now - images are shown during checkout.

[Mike Hughes]

I'm glad to hear you got the missing images back and thanks for posting back what the problem was.

Now all you need to do is get the green padlock working.

[connor25]

Thanks for all of yours help, I think I have found it!

The problem looks like it was caused by Hot Linking Protection in CPanel, this was on and https:// was not in the exclusions, so guess it saw it as a hotlinking site and removed it!

[zgap111]

We had a favicon problem back in Feb 2015 (ref: bug SD-4564)

All our sites links to the favicon were like : http://<website>/acatalog//favicon.ico

- this was resolved by some changes but recently discovered that it's re-appeared on our sites, but it still gave us the padlock = weird (also on one site, there's a Paypal image not served from our site, but still we got a padlock = weird x2)

The problem is only on the old themes/layouts, and looks like they were not patched in the updates... so I had to do this manually.

The advise I was given for the favicon was this:

Please go to 'Settings | Site Options | Layout' and expand the 'Site' group.

Your outer layouts will appear in the following fields: -

Checkout Pages Layout
Login Page Layout
Overall Page Layout
PSP Bounce Page Layout
View Cart Page Layout

Within the default software, these are normally the same file, however within a live site these can all be different and if they are, they will all need to be edited.

To do this, please go to 'Design | Library | Layouts' and scroll down to the group 'Web Page Outer Layouts' and expand it and you will see each of the layouts specified in the fields above within there, double click each one to open them.

Within that group you will also see the layout: -

Receipt page Layout

double click on this again to open it and locate the line: -

<link rel="shortcut icon" href="CatalogURL/favicon.ico" type="image/x-icon" >

Highlight it and replace it with: -

<actinic:block if="%3cactinic%3avariable%20name%3d%22IsBaseHREFStandard%22%20%2f%3e">
<!--[if IE]><link rel="shortcut icon" href="<actinic:variable name="CatalogURL" />favicon.ico"><![endif]-->
<link rel="icon" href="<actinic:variable name="CatalogURL" />favicon.ico">
</actinic:block>
<actinic:block if="%3cactinic%3avariable%20name%3d%22IsBaseHREFSSL%22%20%2f%3e">
<!--[if IE]><link rel="shortcut icon" href="<actinic:variable name="SSLCatalogURL" />favicon.ico"><![endif]-->
<link rel="icon" href="<actinic:variable name="SSLCatalogURL" />favicon.ico">
</actinic:block>

and click 'OK'.

So going to the Site Options, it shows me what layouts were being used.
We were on the old "Smart" layouts, so changes were made in:
"Works Best with Smart"
"Works Best with Smart Brochure Pages"
"Receipt page Layout"

Since v16 there is a favicon group with a Favicon Layout in the library, so there is an alternative to the fix:

What you can do though as the software is v16 and the 'Favicon' group has been created within the library is replace the link:-
<link rel="shortcut icon" href="<actinic:variable name="CatalogURL" />/favicon.ico" type="image/x-icon" />

within the old outer layouts with: -
<actinic:variable name="FaviconLayout" />

and this will call the amended links into place.

I queried the CatalogURL and SSLCatalogURL as they link to the shop folder (eg. acatalog) and our favicon was in the root directory.
- To make that work, you need to add the favicon file into : Design > Additional Files
- I did not know this, but used following available variables which gave links to the root directory:
CatalogHomeURL and SSLCataloghomeURL

[Mike Hughes]

You have multiple problems going on.

The missing images are one thing.

You're also loading the Favicon image from http: which is one of the reasons you're failing the security test on ssl.

[zgap111]

Testing non-SSL:

Open a new browser and try the non-SSL for the logo:
http://www.westontooling.co.uk/shop/...oolinglogo.png
it gives the same 403 error.

Then try (removing "westontoolinglogo.png") :
http://www.westontooling.co.uk/shop/
it would show the site with the logo.

Then try back: http://www.westontooling.co.uk/shop/...oolinglogo.png
it would show the logo
Push F5 to refresh = 403 error.

Something definitely not right...

[connor25]

Thanks Norman, I checked FTP its set to 755, I did change to 777 but still same issue.

Also its only set for checkout SSL

Any ideas?

[NormanRouxel]

HTTPS is not working properly on your server. If I try to load your logo image via:

https://www.westontooling.co.uk/shop...oolinglogo.png

Then I get:

Forbidden
You don't have permission to access /shop/westontoolinglogo.png on this server.
Additionally, a 403 Forbidden error was encountered while trying to use an ErrorDocument to handle the request.

[connor25]

Hi Thanks

Yes I did refresh website, all the images are under the /shop area, and not hard coded as just logo and products that are x'd out...

Really not sure then

[Mike Hughes]

Typically, the problem with images in SSL is that the path to them has been hard coded.

Sellerdeck will automatically use https: for images on ssl pages but if the path to the image has been hard coded as http: then it leaves them alone.

[zgap111]

I hate to ask the obvious,
but did you do a "Refresh Website" after changing SSL settings in Sellerdeck

on other cart software you have to put the images in a SSL area to gain this

For Sellerdeck you don't have to
- we can switch the SSL setting without having to make any changes to the images and their locations.

[connor25]

Hi thanks for reply.

http://www.westontooling.co.uk/index.html

So I have set for checkout only, the SSL is installed correctly as I have double checked this, however it is the images that cause the failure to get a full secure site, on other cart software you have to put the images in a SSL area to gain this, but I can't see for the life of me how to do that with this version.

Thanks

[NormanRouxel]

Welcome to the Community, Connor.

This could be a Network Setup problem. You can export your network setting to a textfile and copy / paste them into a reply here. Make sure you obscure any usernames / passwords.

Also, if you post a link to your site that will let others see your problem and check the source code of your site.