Unsecure elements in checkout

[3dk]

Hi, can anyone help me resolve the unsecure elements in my checkout in Firefox and Google Chrome, seems OK in IE7 tho!

It all seemed to have started when I upgraded to V9.05 a couple of days ago... I think. I have uploaded a snapshot from when things were OK but I can't seem to solve the problem. My site www.3dkitchens.net is running https on a secure server and all the other pages are working fine, until I either go to the checkout or click on a new products link. It could be something to do with the cgi-bin. I have tried a purge and refresh. Any suggestions would be truly appreciated. Thank you.

Steve

[guccij]

I'm getting an invalid security certificate warning in firefox and IE8, so you might want to check that all is as it should be with the SSL now you have upgraded.
The site loads very slowly in all browsers by the way.

[Mike Hughes]

For some reason all your cgi links are pointing to https and your navigation images don't appear to be on https. Are the references hardcoded?

Anyway this isn't usual so I'm wondering if it's something in your setup?

I'd check all the SSL and network settings and failing that you could post your network settings here for us to look at.

Mike

[fergusw]

Open your site in Firefox, go to the checkout (https) and then view "Tools | Page Info | Media" and then look at all the images in your design that are being pulled from http:// instead of https://
e.g. http://www.3dkitchens.net/catalog/logoglow.jpg

The resolution would be to ensure these design element paths (the src's) are site relative instead of static.

[pinbrook]

1 your home button in the horizontal nav seems to be hardcoded to https whereas the other buttons are relative.

2 your left hand nav has js errors

3 this is the error i get in ie8

Webpage error details

User Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 5.1; Trident/4.0)
Timestamp: Wed, 16 Sep 2009 08:53:00 UTC


Message: '_gat' is undefined
Line: 220
Char: 1
Code: 0
URI: http://www.3dkitchens.net/

get all your links to be relative, resolve the js errrors and see how you go..

[3dk]

Hi all, thanks for the feedback, really useful. I have resolved the original issue. Closing the program and restarting, then a purge and refresh must have cured it.

With regards to the hardcoded home link in the horizontal nav bar. Because the home page isn't in the same folder as the catalog, the flash movie can only add a url in the links. If I put a relitive link ie index.html it will send to domain/catalog/index.html. Then if I press a link in the home page movie, it will go to domain/catalog/catalog/index.html... if that makes any sense. It's the only way I could figure out a work around. Thanks again.

Steve

[pinbrook]

wont ../index.html move you up one level.

TBH most people have the same structure as you ie index at root and index within acatalog so it not unacheiveable

however you shouldn't ever have catalog/catalog/index so theres something wrong there

[3dk]

Hi Jo,

It will go up a level. Not a problem for the left or horizontal links. The problem arises with the SWF on the home page. The links in the movie can only be programmed to find a URL ie catalog/schock_granite_sinks.html. See attached example. When the home button is pressed in the way you suggest, it sends the page to domain/catalog/index.html. If the home link went to domain/index.html, it wouldn't be a problem. Then when you press the links in the SWF movie it ends up at catalog/catalog/schock_granite_sinks.html. If there's a way round this, I'd be interested to find out. I live to learn.

Steve

[fergusw]

If you're needing the links to be relative to the root of the site then should it not be

/catalog/schock_granite_sinks.html

?

[Mike Hughes]

The problem arises with the SWF on the home page. The links in the movie can only be programmed to find a URL ie catalog/schock_granite_sinks.html. See attached example. When the home button is pressed in the way you suggest, it sends the page to domain/catalog/index.html. If the home link went to domain/index.html, it wouldn't be a problem. Then when you press the links in the SWF movie it ends up at catalog/catalog/schock_granite_sinks.html. If there's a way round this, I'd be interested to find out. I live to learn.

Normally, you just link to the destination filename and actinic automatically provides the base reference using the BASEHREF statement at the top of the page.

Are you saying that the relative links in the swf file don't obey the BASEHREF on the page and therefor the same swf file will link to different locations depending in whether it's in the root or /acatalog/ ?

Mike

[Mark H]

Couldn't you just put absolute references in the SWF?

[Mr_Gareth]

I think I'm having the same problem on http://www.just-soaps.com
When a user visits the checkout or tries to login the ssl certificate shows errors.
I've tried most browser with no joy.

I think is a combination of;
1) The certificate appears not to be verified
2) unsecure elements on the page

Can something as simple as a http:// link cause this. If that's the case what about Analytics in the html template?

[Mr_Gareth]

I'll try that with Analytics.

Also my top nav options have http:// links.
- <a href="http://www.just-soaps.com/cgi-bin/ss000002.pl?ACTION=LOGIN" target="_self">Login</a>

How to I turn them to https?

[pinbrook]

Have you hardcoded your navigation? You need relative paths so the software automatically puts http or https as appropriate

[Mr_Gareth]

No, they're not relative. I'll try that.

I presume the paths to external sites can remain as http. I've looked at valid sites i.e. the site which started the topic - www.3dkitchens.net. This sites checkout contain http links to external sites.
Very confusing!