https and custom html

[concretegong]

I have a store that has been completely customised.
I also have a high quality ssl certificate.

My problem is that when I go into the checkout (or any secure page) the url's to the custom images are remaining as http not https.

Firefox gives me a message stating that 'Connection Partially Encrypted' - see below...



Any ideas how to fix this? I do not want to use https throughout the rest of the site.

Thanks

[leehack]

Have you told actinic that you wish to use it across the whole site? It's usually a bad idea to do this as it can cause speed issues, but if you insist, then take a look on the payment and security tab of business settings.

[fergusw]

My problem is that when I go into the checkout (or any secure page) the url's to the custom images are remaining as http not https.

This is most likely because the custom HTML in question is absolutely referring to your images in the HTML

e.g.

<img src="http://yourdomain/acatlaog/image.jpg/">

instead of relative ones
e.g.

<img src="mage.jpg/">

which, with the correct <Actinic:BASEHREF> block in the head area of each page will result in the images correctly displaying in http or https.
This is because Actinic cleverly fills in the path in front of the image for you.

[concretegong]

Thanks for the rapid response.

Have you told actinic that you wish to use it across the whole site?

This is exactly what I don't want to do. I want to be secure only on the relevant pages.

This is most likely because the custom HTML in question is absolutely referring to your images in the HTML

Looking at the source this is almost certainly the case, however the custom images are not using absolute links they are all relative.

Is there something in the <Actinic:BASEHREF> that should be altered?

[leehack]

What have you got as your website url in business settings?

[concretegong]

www.h-i-e.co.uk

[concretegong]

This is whats in the Default Base Href

<actinic:block if="%3cactinic%3avariable%20name%3d%22IsBaseHREFStandard%22%20%2f%3e">
<actinic:block if="%3cactinic%3avariable%20name%3d%22IsBaseHREFIncludesAcatalog%22%20%2f%3e" >
<Actinic:BASEHREF VALUE="<Actinic:Variable Name="CatalogURL"/>" FORCED=0 />
</actinic:block>
<actinic:block if="%3cactinic%3avariable%20name%3d%22IsBaseHREFForced%22%20%2f%3e" >
<Actinic:BASEHREF VALUE="<actinic:variable name="CatalogHomeURL" />" FORCED=1 />
</actinic:block>
</actinic:block>
<actinic:block if="%3cactinic%3avariable%20name%3d%22IsBaseHREFSSL%22%20%2f%3e">
<actinic:block if="%3cactinic%3avariable%20name%3d%22IsBaseHREFIncludesAcatalog%22%20%2f%3e" >
<Actinic:BASEHREF VALUE="<Actinic:Variable Name="SSLCatalogURL"/>" FORCED=0 />
</actinic:block>
<actinic:block if="%3cactinic%3avariable%20name%3d%22IsBaseHREFForced%22%20%2f%3e" >
<Actinic:BASEHREF VALUE="<actinic:variable name="SSLCatalogHomeURL" />" FORCED=1 />
</actinic:block>
</actinic:block>

[fergusw]

If your site is
h-i-e.co.uk then I can see the ertificate issue.
It is not one directly from any images within you site that I can see.

if anything I would check what is loading
https://cbi.boldchat.com/aid/4840522...99438533576295
onto the page.
When I visit this link I get redirected to
https://www.h-i-e.co.uk/acatalog/not...c_r=2007009098

possibly thisboldchat https call is invalidating the SSL?

[pinbrook]

YUK .... you need to sort out the layout and background in FF

[concretegong]

I know, I know...

[concretegong]

On a secure page, should every link's protocol be https?

[pinbrook]

On a secure page, should every link's protocol be https?

they should be relative