Post by mikepham » Sat Jan 15, 2011 2:19 am

Hello all. Was hoping someone might be able to shed a little light on my problem. Also, please excuse my lack of knowledge and if I use any terms incorrectly.

Website at http://www.homemoviepreservation.com and using version 1.4.8b

I just recently noticed while using the Chrome browser that any page that uses https:// has the little red "X" over the lock icon and has a message that says "this page includes resources that are not secure".

https://homemoviepreservation.com/index ... ount/login

I did some looking around on the forums here and came to the conclusion that the problem is the site having some links to "http://" instead of "https://".

Can anyone tell me if that is the problem? Also, if that is indeed the problem, which files would I edit to change the "http://" to "https://"?

Any help would be greatly appreciated. Thank you in advance.
Last edited by i2Paq on Fri Jan 21, 2011 3:40 pm, edited 1 time in total.
Reason: Topic moved

Newbie

Posts

Joined
Tue Aug 31, 2010 9:26 am

Post by Moggin » Sat Jan 15, 2011 4:25 am

mikepham wrote:I did some looking around on the forums here and came to the conclusion that the problem is the site having some links to "http://" instead of "https://".
That's correct, more or less - though it's content, rather than just links, that will trigger a warning (eg an image, or script).

The problem here seems to be the addthis script, which is in the header:

Code: Select all

<script type="text/javascript" src="http://s7.addthis.com/js/250/addthis_widget.js#username=xa-4c44052274824f7f"></script> <div class="addthis_toolbox addthis_default_style" style="float:left; display:block; padding-left:5px; padding-top:10px;  width:180px;   ">
<a href="http://www.addthis.com/bookmark.php?v=250&username=xa-4c44052274824f7f" class="addthis_button_compact">Share</a>
- the script is 'unsecured', as it's coming from http: //s7.addthis.com.

Solving it may be tricky - or quite simple. Ideas that may work:

1. Move the addthis button code from the header to somewhere within the product.tpl - then it will only appear on the product pages, not in the checkout pages (this is what I do)

2. Here's what addthis suggest you do:
In the code of the widget replace:

http://s7.addthis.com or http://s5.addthis.com
with:

https://s7.addthis.com/
That's it. All features will continue to work the same.
http://www.addthis.com/help/ssl

But Opencart pages are loaded dynamically - if you change the code to https: , it will load addthis over SSL on every single page, not just the secure ones. I think this might slow down your pages - but you could try it.

3. Something to try: remove the http: from the addthis widget script altogether.

Code: Select all

<script type="text/javascript" src="//s7.addthis.com/js/250/addthis_widget.js#username=xa-4c44052274824f7f">
See if it still works, and if it gets rid of the error.

Backup first, as always

Active Member

Posts

Joined
Wed May 05, 2010 4:56 am

Post by jamieclick » Fri Jan 21, 2011 7:40 am

HI,

I am having the same issue here https://www.thewqgiftcompany.com/index. ... ount/login

Where do you think my error is coming from?

Thanks

Click Business Solutions,
http://www.clickbusinesssolutions.co.uk
Info@clickbusinesssolutions.co.uk


New member

Posts

Joined
Tue Apr 20, 2010 7:46 am
Location - UK

Post by Moggin » Sat Jan 22, 2011 3:19 am

I'm not seeing a problem jamieclick - I guess you have fixed it. Beautiful site BTW.

Active Member

Posts

Joined
Wed May 05, 2010 4:56 am
Who is online

Users browsing this forum: No registered users and 7 guests