I believe this is an SSL issue. How to stop "mixed content?" producing a security warning so the task can be completed e.g. contact, coupon, voucher or article refresh in cart? Apologies for any incorrect terminology.On my recently installed opencart 1.5.6 I have an SSL certificate installed from the host provider. I have tested this on various sites and everything seems fine. But, when the contact form, coupon code, gift voucher or article amount refresh in shopping cart is used then a pop-up security window comes up.
If either continue or cancel is clicked then nothing really happens apart from the warning window closes. e.g. contact mail is not sent but details removed from contact formula, no gift voucher or coupon is taken into account when entered in the cart and no refresh if the amount of articles are adjusted and refreshed in the cart.Security Warning
Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.
Are you sure you want to continue sending this information?
- opencart is not in / but installed in /shop/ .htaccess adjusted as such (see below)
- Default theme with only a couple of colours adjusted in the stylesheet
- VQMOD 2.5.1 installed with - german language pack, powered plus and return request email extensions
- SSL active in admin backend and config.php adjusted as per below
/shop/config.php
Code: Select all
// HTTP
define('HTTP_SERVER', 'http://www."mydomain".net/shop/');
// HTTPS
define('HTTPS_SERVER', 'https://www."mydomain".net/shop/');
// DIR
define('DIR_APPLICATION', '/mnt/webo/a2/58/5854158/htdocs/shop/catalog/');
define('DIR_SYSTEM', '/mnt/webo/a2/58/5854158/htdocs/shop/system/');
define('DIR_DATABASE', '/mnt/webo/a2/58/5854158/htdocs/shop/system/database/');
define('DIR_LANGUAGE', '/mnt/webo/a2/58/5854158/htdocs/shop/catalog/language/');
define('DIR_TEMPLATE', '/mnt/webo/a2/58/5854158/htdocs/shop/catalog/view/theme/');
define('DIR_CONFIG', '/mnt/webo/a2/58/5854158/htdocs/shop/system/config/');
define('DIR_IMAGE', '/mnt/webo/a2/58/5854158/htdocs/shop/image/');
define('DIR_CACHE', '/mnt/webo/a2/58/5854158/htdocs/shop/system/cache/');
define('DIR_DOWNLOAD', '/mnt/webo/a2/58/5854158/htdocs/shop/download/');
define('DIR_LOGS', '/mnt/webo/a2/58/5854158/htdocs/shop/system/logs/');/shop/admin/config.php
Code: Select all
// HTTP
define('HTTP_SERVER', 'http://www."mydomain".net/shop/admin/');
define('HTTP_CATALOG', 'http://www."mydomain".net/shop/');
define('HTTP_IMAGE', 'http://www."mydomain".net/shop/image/');
// HTTPS
define('HTTPS_SERVER', 'https://www."mydomain".net/shop/admin/');
define('HTTPS_CATALOG', 'https://www."mydomain".net/shop/');
define('HTTPS_IMAGE', 'https://www."mydomain".net/shop/image/');
// DIR
define('DIR_APPLICATION', '/mnt/webo/a2/58/5854158/htdocs/shop/admin/');
define('DIR_SYSTEM', '/mnt/webo/a2/58/5854158/htdocs/shop/system/');
define('DIR_DATABASE', '/mnt/webo/a2/58/5854158/htdocs/shop/system/database/');
define('DIR_LANGUAGE', '/mnt/webo/a2/58/5854158/htdocs/shop/admin/language/');
define('DIR_TEMPLATE', '/mnt/webo/a2/58/5854158/htdocs/shop/admin/view/template/');
define('DIR_CONFIG', '/mnt/webo/a2/58/5854158/htdocs/shop/system/config/');
define('DIR_IMAGE', '/mnt/webo/a2/58/5854158/htdocs/shop/image/');
define('DIR_CACHE', '/mnt/webo/a2/58/5854158/htdocs/shop/system/cache/');
define('DIR_DOWNLOAD', '/mnt/webo/a2/58/5854158/htdocs/shop/download/');
define('DIR_LOGS', '/mnt/webo/a2/58/5854158/htdocs/shop/system/logs/');
define('DIR_CATALOG', '/mnt/webo/a2/58/5854158/htdocs/shop/catalog/');I have seen posts with similar issue where it was mentioned that the .htaccess had been adjusted but as my .htaccess file has neither of the entries in these solutions they do not help me.
SSL on shopping cart doesn't allow updates to cart
http://forum.opencart.com/viewtopic.php?f=20&t=97332
and
Unsecure coupon box in cart after SSL
http://forum.opencart.com/viewtopic.php?f=20&t=125220
Part of my .htaccess if this helps anyone with a possible solution:
Code: Select all
Options +FollowSymlinks
# Prevent Directoy listing
Options -Indexes
# Prevent Direct Access to files
<FilesMatch "\.(tpl|ini|log)">
Order deny,allow
Deny from all
</FilesMatch>
# SEO URL Settings
RewriteEngine On
RewriteBase /shop/
RewriteRule ^sitemap.xml$ index.php?route=feed/google_sitemap [L]
RewriteRule ^googlebase.xml$ index.php?route=feed/google_base [L]
RewriteRule ^download/(.*) /index.php?route=error/not_found [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_URI} !.*\.(ico|gif|jpg|jpeg|png|js|css)
RewriteRule ^([^?]*) index.php?_route_=$1 [L,QSA]
