Post by Acknowledged74 » Tue Dec 22, 2015 11:26 pm

Hi

I've installed the SSL on my site, its been checked by both my host and GoDaddy who provide the SSL.

Apparently due to the fact that some of the links in the code are http:// not https:// there is a padlock in the URL bar but it has a yellow warning icon infront of it.

' Parts of this page of not secure, such as the images' I'd followed this instructions

http://www.inmotionhosting.com/support/ ... n-opencart

Please see attached image.

I've got the SSL thing chosen in the admin, which I would have thought automatically change the http to https, i guess not.

Any help would be greatly appreciated :)

Attachments

screenshot.gif

screenshot.gif (13.73 KiB) Viewed 696 times



Posts

Joined
Fri Jan 02, 2015 1:31 am

Post by IP_CAM » Wed Dec 23, 2015 1:04 am

It would not require 2 different Postings, in order to handle ONE Problem.
And it would require, to set EVERYTHING to https, within your Shop, and DB,
to make it work fully https-SECURE. Therefore, just scan a fully downloaded Copy of
your software, and DB, to find any HTTP, and change that to https.

Since no-one else has an idea, what you have and use, on Themes and Extensions, therefore,
no-one can tell, where to find what...

Ernie
bigmax.ch/shop/

My Github OC Site: https://github.com/IP-CAM
5'600 + FREE OC Extensions, on the World's largest private Github OC Repository Archive Site.


User avatar
Legendary Member

Posts

Joined
Tue Mar 04, 2014 1:37 am
Location - Switzerland

Post by grgr » Wed Dec 23, 2015 1:37 am

That will be the Verified and the PayPal logos causing a problem.

Reference them with an https url.

-
Image Image Image
VIEW ALL EXTENSIONS * EXTENSION SUPPORT * WEBSITE * CUSTOM REQUESTS


User avatar
Active Member

Posts

Joined
Mon Mar 28, 2011 4:08 pm
Location - UK

Post by sgarbus » Wed Dec 23, 2015 7:25 am

If you have SSH access, you can always use grep to search for any strings in your files that contain 'http'.

For example, navigate to the directory you have OC installed in. (cd /oc_install/)

Then run the following:
grep -w "http" *

This will show any instances of 'http' only (not https) that are contained in any file in that specific OC directory. I'd imagine you'd want to run it in /catalog/view/themes/yourtheme

If you look into 'grep' a bit more you can figure out how to run it throughout your entire OC directory.

For example though (and this is one without looking through every directory), an output of a simple 1 page website I have will list something like this:

Code: Select all

username@server[~/www/domain.com]# grep -w "http" *
grep: assets: Is a directory
index.html:    <meta http-equiv="X-UA-Compatible" content="IE=edge">
index.html:<link href='http://fonts.googleapis.com/css?family=Open+Sans:400,300,600,700,800' rel='stylesheet' type='text/css'>
index.html:<link href='http://fonts.googleapis.com/css?family=Droid+Serif:400,700' rel='stylesheet' type='text/css'>
index.html:<link href='http://fonts.googleapis.com/css?family=Roboto+Condensed:700,400' rel='stylesheet' type='text/css'>
username@server[~/www/domain.com]#
Whereas if I grep for 'https', it returns:

Code: Select all

username@server[~/www/domain.com]# grep -w "https" *
grep: assets: Is a directory
index.html:<link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/font-awesome/4.4.0/css/font-awesome.min.css">
index.html:      <script src="https://oss.maxcdn.com/libs/html5shiv/3.7.0/html5shiv.js"></script>
index.html:      <script src="https://oss.maxcdn.com/libs/respond.js/1.3.0/respond.min.js"></script>
index.html:    <script src="https://code.jquery.com/jquery-1.10.2.min.js"></script>
Hope that helps a bit to help track your issues down.

Newbie

Posts

Joined
Tue Dec 22, 2015 10:01 pm

Post by uksitebuilder » Wed Dec 23, 2015 4:30 pm

You can also use https://www.whynopadlock.com to scan the page/url and list what is insecure on it

User avatar
Guru Member

Posts

Joined
Thu Jun 09, 2011 11:37 pm
Location - United Kindgom
Who is online

Users browsing this forum: No registered users and 15 guests