Odd SSL problem

Poster: choirboy24
Dated: Friday July 21 2006 - 21:10:09 BST

Like many others on this forum, I've been having an issue with getting an SSL error of "This page contains both secure and nonsecure items..." when trying to view my pages in https. I've gotten it to the point where the page will come up in HTTPS normally UNTIL I mouse over a menu that has a sub menu in it, at which point it throws the error from above. I've got all my pertinent JS files changed so that they either have all relative links or absolute links to the https address (some of the JS files won't work unless you have absolute links). I've also tried putting a blank.htm file at the root of all the directories these files are in.

Can anyone help shed some light on this because this is driving me insane and I have to have these pages launched by early next week!

Oh by the way, the page I'm working with is https://www.gsutah.org/support/cfac_registration.php

Thanks much in advance!
G.L. Anderson
Network Administrator
Girl Scouts of Utah

Poster: Ruth
Dated: Saturday July 22 2006 - 1:16:36 BST

Hi,

The images in your menu_data.js file are not in the https section. That is probably what is causing that message. It's not an 'error', it's the browsers notice to the user that the page contains both secure, i.e. https, stuff and not secure, i.e. http, stuff.

Ruth

Poster: choirboy24
Dated: Saturday July 22 2006 - 4:26:18 BST

Actually...I checked that before and made sure the three images referenced in the menu_data.js file were https://, which is why I'm so puzzled. This page comes up just fine in Firefox, but not in IE. Can you provide any more assistance? Thanks.

Poster: Ruth
Dated: Saturday July 22 2006 - 5:06:36 BST

Hi,

In your menu_data.js file you have this in your menuStyle2



I believe that is what is causing that. As to showing up in FF without the message, I would guess you don't have it set to tell you if you have both secure and not secure items, whereas I believe that is default in IE...to tell you that, I mean.

Once you get all the items into the https, if it is still doing it post back. I'll have to ask Milonic about it.

Ruth

Poster: choirboy24
Dated: Saturday July 22 2006 - 8:21:07 BST

Unfortunately, I think you were looking at the menu_data.js file that's in the includes directory. I modified the menu.html, main-scroll.html and menu_data.js files and put them in the support directory. I changed any http:// references I found to https://, but it's still not working. If you have any other ideas or can pass this along to Milonic support, I'd appreciate it. Thanks!

Poster: Ruth
Dated: Saturday July 22 2006 - 12:52:21 BST

Hi,

I can't throw it up and test it on my site, however.... you still have images that are not in the https area, at least on that registration.php page.

What I did was go to your site twice. The first time when it told me there were both secure and non-secure items and did I want to show the non-secure I said yes. All the subimages showed up in the submenus when I opened them on that page. The second time I told it not to show the non secure items and those subimages, they look like little white boxes with borders and a diagonal arrow in them, those subimages did not show up on that page.

I will report to Milonic, but since those images did not show up when I told it not to show me the non-secure items, it has to be them causing the problem; those were the only items that had the little x where the image was supposed to be.

I'm not sure what difference the includes makes, the page is using that menu_data.js file and when it goes to get those subimages the url for those images is still http: in that menu_data.js file.

One way to test that would be to go into that menu_data.js file and in the menuStyle2 cut out all those subimages. Actually, cut out all the subimages from all the styles even those that you have slashed out, just to be absolutely sure about things.
Ruth

Poster: Ruth
Dated: Saturday July 22 2006 - 13:06:48 BST

After some more checking on your page, I'm going to have to say that it is those images, they are in the menuStyle2. That style is not used for the main menu which is why I don't get that message when I first go to the site. However, that is the style used by the submenus and it is when you mouse over the main menu to show a submenu which has other submenus opening off of it and therefore has the subimages that the message occurs.

For example, if I make sure not to mouseover any item that has a submenu with images when I get to the page and go directly to the Forms item, I get no message. Moving up from forms to Donate, I get no message because the donate submenu has no subimages. But when I then move up to Camps that submenu has two subimage arrows in it and I get the message.

I did post to Milonic.

Ruth