Secure site problem

[fuzzie bear]

I have purchased a secure site certificate. I have checked the box in actinic that prompts you if you have a secure site. However, when you navigate around my site, you get messages saying 'This page contains secure and non-secure items. Do you wish to display the non secure items?'

Its very annoying for customers to click yes or no all the time. Is this a problem with actinic, my secure cert or am i just doing something wrong ??

[bentleybloke]

Have a look in Advanced | Network Settings to make sure that you don't have https:// in the wrong place! https:// should only be in fields on the SSL tab.

Failing that, export the network settings and post them - be sure to blank out your FTP passwords!

[fuzzie bear]

Changed that, but it still didnt work.

Heres my settings :

HTTPPROXYMODE 0
HTTPPROXYADDRESS
HTTPPROXYPORT 80
HTTPPROXYUSER
HTTPPROXYPASSWORD
FTPPROXYMODE 0
FTPPROXYADDRESS
FTPPROXYPORT 21
FTPPROXYUSER
FTPPROXYPASSWORD
SCRIPTID 1
SCRIPTEXT .pl
SMTPHOST mail.pet-bliss.com
WEBSITEURL http://www.pet-bliss.com
IGNOREPASSIVEERRORS true
USERELATIVECGIURLS false
PATHTOPERL /usr/bin/perl
SMTPAUTHREQUIRED false
SMTPUSERNAME
SMTPPASSWORD
SSLCATALOGURL https://www.pet-bliss.com/acatalog/
SSLCGIBINURL https://www.pet-bliss.com/cgi-bin/
SSLPATHFROMCGITOCATALOG ../acatalog/
SSLCODEBASE ./
SSLFTPHOST www.pet-bliss.com
SSLFTPUSERNAME petbliss
SSLFTPPASSWORD ****
SSLPATHTOCGIBIN /public_html/cgi-bin/
SSLUSEPASSIVEFTP true

[jont]

Hi Lyndsey - have you managed to sort this out as I managed to get all the way through to the paypal site without any error messages

[Wedji]

I've got the same problem with my own site, but I know what's causing it in my case and it's semi-deliberate for the moment.

There's absolute references in the page templates for some of the images in the customised header bar I'm using. Images are linked as "http://www.clarity.it/buttons/filename" as opposed to "../buttons/filename"

This will give punters who haven't got the warning prompt for this switched off in their browser a popup as you describe at the checkout once it transitions to HTTPS mode.

So, bottom line - have you got any absolute references as opposed to relative in any of your templates?

I'll be changing mine back to relative tomorrow hopefully... :-)

John

[bentleybloke]

In View | Business Settings | Payment & Security try setting it so that ssl is only on Checkout Pages and Customer Login only.

As Wedji says, make sure that you don't have absolute image urls in your templates or the customvars that put the images in your bars.

[cdicken]

Hi Lyndsey

Are you still getting problems here? When I look at your site with Internet Explorer and say that I don't want to view the non-secure items, it's all the images in the sidebars that I don't see.

When I view the source of the page, I see that the path to these images is:

<img src="http://www.pet-bliss.com/acatalog/JuwelVision260SmallImage.jpg" width="123" height="123">

In other words, you are pointing to these images with an insecure path. Change these to https

[fuzzie bear]

Only getting a chance to look at this now.

Yes, I'm using absolute references with images... must get that changed.

Thanks for the responses !