SSL secured site giving off "unsecured" messages

[Diane721]

Can someone tell me how to fix "lack of security" errors on the HCAT Module and MGC Carousel of products module? I was getting messages that my site was not secure. My site is: homegoodsoutlet.com especially on Google Chrome.

 

I did a search on whynopadlock.com and have enclosed a screenshot of the results. I know which are the culprit files, but I dont know what to fix or how, Can someone help? Please?

 

Thanks, Diane

 

HERE ARE THE RESULTS OF THE SCAN OF "UNSECURED FILES"

 

 

Domain Name: homegoodsoutlet.com

URL Tested: https://homegoodsoutlet.com

Number of items downloaded on page: 184

 

Valid Certificate found.

Certificate valid through: Apr 27 01:38:14 2013 GMT

Certificate Issuer: GeoTrust, Inc.

Total number of items: 184

Number of insecure items: 13

Insecure URL: http://www.homegoodsoutlet.com/modules/hcatmenu/hcatmenu.css

Found in: https://www.homegoodsoutlet.com/

 

Insecure URL: http://www.homegoodsoutlet.com/modules/homecarousel/jcarousel/lib/jquery.jcarousel.pack.js

Found in: https://www.homegoodsoutlet.com/

 

Insecure URL: http://www.homegoodsoutlet.com/modules/homecarousel/jcarousel/lib/jquery.jcarousel.css

Found in: https://www.homegoodsoutlet.com/

 

Insecure URL: http://www.homegoodsoutlet.com/modules/homecarousel/jcarousel/skins/tango/skin.css

Found in: https://www.homegoodsoutlet.com/

 

Insecure URL: http://www.homegoodsoutlet.com/modules/homecarousel/homecarousel.js

Found in: https://www.homegoodsoutlet.com/

 

Insecure URL: http://www.homegoodsoutlet.com/modules/hcatmenu/img/arrow_up.png

Found in: http://www.homegoodsoutlet.com/modules/hcatmenu/hcatmenu.css

 

Insecure URL: http://www.homegoodsoutlet.com/modules/hcatmenu/img/arrow_down.png

Found in: http://www.homegoodsoutlet.com/modules/hcatmenu/hcatmenu.css

 

Insecure URL: http://www.homegoodsoutlet.com/modules/hcatmenu/img/arrow_left1.jpg

Found in: http://www.homegoodsoutlet.com/modules/hcatmenu/hcatmenu.css

 

Insecure URL: http://www.homegoodsoutlet.com/modules/hcatmenu/img/arrow_left2.jpg

Found in: http://www.homegoodsoutlet.com/modules/hcatmenu/hcatmenu.css

 

Insecure URL: http://www.homegoodsoutlet.com/modules/homecarousel/jcarousel/skins/tango/next-horizontal.png

Found in: http://www.homegoodsoutlet.com/modules/homecarousel/jcarousel/skins/tango/skin.css

 

Insecure URL: http://www.homegoodsoutlet.com/modules/homecarousel/jcarousel/skins/tango/prev-horizontal.png

Found in: http://www.homegoodsoutlet.com/modules/homecarousel/jcarousel/skins/tango/skin.css

 

Insecure URL: http://www.homegoodsoutlet.com/modules/homecarousel/jcarousel/skins/tango/next-vertical.png

Found in: http://www.homegoodsoutlet.com/modules/homecarousel/jcarousel/skins/tango/skin.css

 

Insecure URL: http://www.homegoodsoutlet.com/modules/homecarousel/jcarousel/skins/tango/prev-vertical.png

Found in: http://www.homegoodsoutlet.com/modules/homecarousel/jcarousel/skins/tango/skin.css

 

Secure calls made to other websites:

www.homegoodsoutlet.com is valid and secure.

Edited May 21, 2012 by Diane721 (see edit history)

[Diane721]

Thank you all in advance!!

Edited May 21, 2012 by Diane721 (see edit history)

[tomerg3]

You need to make sure that all links to CSS / JS / images are made to the https:// URL.

You can do a view source on your page and check for any http:// links (Note, than a regular <a href=""> can be to http:// without any issues)

[tdr170]

Check your Seo & url section and make sure both addresses are the same.

 

Shop domain name: www.homegoodsoutlet.com

 

Shop domain for SSL: www.homegoodsoutlet.com

 

If that is correct have you regenerated your .htaccess file since enabling SSL.

 

If all above is true and the issue still exist try this, paste the code below into the Specific configuration text are and regenerate the

.htaccess file and see if that helps.

 

 

RewriteCond %{HTTPS} off

RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

 

This will put the entire site under HTTPS.

[Diane721]

Hi and thanks for your speedy reply! I did check the page source and found that all categories are http referenced rather https.

I don't know HOW to get to/find the corresponding files. All the CSS and PHP files I looked at in HCAT Menu, dont show any http/url links. Im a novice here, but learn quickly. I dont have an actual path CCS/JS/Image, but I checked in some of those folders and still cant find any doc with URL Links. Could you or someone maybe give me more details on how to locate the actual file/s I need to change to https?

Here's a snippet: type="text/javascript">/* <![CDATA[ *//* ]]> */</script><link rel="stylesheet" media="all" type="text/css" href="http://www.homegoodsoutlet.com/modules/hcatmenu/hcatmenu.css" /><div class="top-menu"><div id="menu"><ul class="niveau1"><li class="sousmenu"> <a href="http://www.homegoodsoutlet.com/category.php?id_category=32">Cookware</a><ul class="niveau2"><li> <a href="http://www.homegoodsoutlet.com/category.php?id_category=35">Bakeware</a></li><li> <a href="http://www.homegoodsoutlet.com/category.php?id_category=40">Basic Essentials</a></li><li> <a href="http://www.homegoodsoutlet.com/category.php?id_category=36">Cutlery</a></li><li> <a href="http://www.homegoodsoutlet.com/category.php?id_category=38">Gadgets</a></li><li> <a href="http://www.homegoodsoutlet.com/category.php?id_category=39">Gourmet Cookware Pcs</a></li><li> <a href="http://www.homegoodsoutlet.com/category.php?id_category=81">Gourmet Cookware Set</a></li><li> <a href="http://www.homegoodsoutlet.com/category.php?id_category=55">Grills and Griddles</a></li><li> <a href="http://www.homegoodsoutlet.com/category.php?id_category=42">Novelty Cookware</a></li><li> <a href="http://www.homegoodsoutlet.com/category.php?id_category=37">Prep, Serve, and Store</a></li><li class="last"> <a href="http://www.homegoodsoutlet.com/category.php?id_category=41">Pressure Cookers</a></li><div class="clear"></div></ul></li><li class="sousmenu"> <a href="http://www.homegoodsoutlet.com/category.php?id_category=34">Floor Care</a><ul class="niveau2"><li> <a href="http://www.homegoodsoutlet.com/category.php?id_category=54">Floor Cleaners</a></li><li> <a href="http://www.homegoodsoutlet.com/category.php?id_category=44">Floor Steamers</a></li><li class="last"> <a href="http://www.homegoodsoutlet.com/category.php?id_category=43">Vacuums</a></li><div class="clear"></div></ul></li><li class="sousmenu"> <a href="http://www.homegoodsoutlet.com/category.php?id_category=5">Personal Care</a><ul class="niveau2"><li> <a href="http://www.homegoodsoutlet.com/category.php?id_category=62">Bath and Laundry</a></li><li> <a href="http://www.homegoodsoutlet.com/category.php?id_category=20">Electric Shavers</a></li><li> <a href="http://www.homegoodsoutlet.com/category.php?id_category=60">For Men</a></li><li> <a href="http://www.homegoodsoutlet.com/category.php?id_category=58">For Women</a></li><li> <a href="http://www.homegoodsoutlet.com/category.php?id_category=50">Hair Dryers</a></li><li class="last"> <a href="http://www.homegoodsoutlet.com/category.php?id_category=21">Massagers</a></li><div class="clear"></div></ul></li><li class="last sousmenu"> <a href="http://www.homegoodsoutlet.com/category.php?id_category=79">Sm Appliances</a><ul class="niveau2"><li> <a href="http://www.homegoodsoutlet.com/category.php?id_category=13">Blenders, Juicers, Food Processors</a></li><li> <a href="http://www.homegoodsoutlet.com/category.php?id_category=15">Coffee Cappuccino Espresso and Tea </a></li><li> <a href="http://www.homegoodsoutlet.com/category.php?id_category=16">Grills, Griddles and Deep Fryers</a></li><li class="last"> <a href="http://www.homegoodsoutlet.com/category.php?id_category=19">Toaster, Convection, Rotisserie Ovens</a></li><div class="clear"></div></ul></li></ul></div><div style="clear:left;height:0px;"></div></div><link href="/modules/blockhomeslideshow/js/prod.css" rel="stylesheet" type="text/css" media="all" /><script src="/modules/blockhomeslideshow/js/jquery_002.js" type="text/javascript">/* <![CDATA[ *//* ]]> */</script><script charset="utf-8" type="text/javascript">/* <![CDATA[ */ $(window).load(function()

[Diane721]

Thanks soooo much Tdr, I'll try your suggestions! No, I didnt regenerate .htaccess file. I will do it right now!

[Diane721]

The info you suggested was already true, so I pasted in the "command" you gave me for the new .htaccess file, but sadly it did not help. The problem is the home images in the carousel AND all the categories. I can live w/o the carousel but not all the category photos Any other idea? Anyone? Thanks to all, and God bless all who try to help!

[tdr170]

I get the same message with Chrome but in IE I get This website wants to run a Quicktime script from a insecure something or other.

In Chrome the only thing that does not load is the carosel if you disable that do you still get the security warning.

[Diane721]

I deleted the horizontal sliding carousel and now Im down to only 1 error!!

Can someone please help me? Here is a screen shot of the last, and ONLY security breech I have on my SSL secured site. Maybe someone could click on the insecure link, (HCATMENU) and tell me what I need to change. Thanks!!!

 

 

Domain Name: homegoodsoutlet.com

URL Tested: https://homegoodsoutlet.com

Number of items downloaded on page: 127 Valid Certificate found. Certificate valid through: Apr 27 01:38:14 2013 GMT

Certificate Issuer: GeoTrust, Inc. Total number of items: 127

Number of insecure items: 1

Insecure URL: http://www.homegoods...nu/hcatmenu.css

Found in: https://www.homegoodsoutlet.com/

Secure calls made to other websites:

 

www.homegoodsoutlet.com is valid and secure.

I can NOT find any URL links AT ALL on the files in that folder.

Edited May 22, 2012 by Diane721 (see edit history)

[pepperr]

hi, i have troubles with this too. I use pay theme, when use it i have this warning on google chrome that recomends to not load the site. And on mozzila the blue bar is missing. I have two more sites usnig prestashop and ssl, but there is no problem. I tried the .htaccess rule,

RewriteCond %{HTTPS} off

RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

But it is not helping to show the blue bar in firefox and google chrome is still with warning. The site is still not ready not working with customers. But i need to be ready when time comes. I saw other topic similar to this there was suggestion to edit init.php at line 150-160 (do not remember the exat lin) but i could't find where is that init.php i have one at root folder wich has only 3-4 lines.

How can I force presta using ssl on all pages, this .htaccess rule not work for me.

[tdr170]

This is a redirect rule and should work make sure to set force compile to on and cache off.

You may also need to clear you browser cache and the cache folder in prestashop.

..themes/ prestashop/cache

..tools/ smarty/ cache

Also in Bo make sure under preferences/ SEO & URL you have

Friendly URL (YES)

Automatically redirect to Canonical url (YES)

 

Now check the .htaccess file and make sure all three lines below appear at the top of the page.

(this should be there by default)

 

RewriteEngine on

 

(these we added)

RewriteCond %{HTTPS} off

RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

 

Also pepper please give a link to site so others may look.

so

[tdr170]

Edited

Edited May 28, 2012 by tdr170 (see edit history)

[Diane721]

tdr,

 

Thank you so much for your help, and the time you put in to assist me!

I tried everything you said, incl using your "new" file, clearing all cache etc, and all other setting, still the problem exists.

Something strange happen though. I removed from the server (to test) both the hcatmenu.css files one was in original Prestashop module files, and the other was in theme folder module files. When both files were completely removed from the system, I STILL got the security error. So it has to be something else even thought the website "whynopadlock.com" keeps pointing to the .css file.

as the problem. Im going to visit my daughter, but will be back to do more troubleshooting on Thurs. Thanks again for all your help!

Diane

[pepperr]

Ok i investigated the problem a bit. Two modules are causing me trouble, one is mgcarousel1.4 and other is some kind of social plugin. After uninstall both modules - site works perfectly! But the question is how can i make this MgCarousel thing to work correctly under https://, also the other module with the plugins. Here the site click here. I went thru some topics and understand that it is not a good idea to force the site with ssl

[tdr170]

This popped up today maybe this will help.

http://www.prestashop.com/forums/topic/143775-website-with-unsecure-content-ssl-problem-images-link-to-http-and-not-https/

[Diane721]

Thanks so much for looking out for me!! You're a real gem

The post was exactly the same problem I'm having and the user solved it, but never told us how he fixed it.

I can't believe it. I'll keep hunting and searching. Thanks

[phrasespot]

I do notice some strange characters in the file, I have never seen this > used in a CSS file what I would try is to delete these characters from the CSS file and have a blank space as in other areas of file.

Bad advice.

 

> is child element selector

 

X > Y matches any Y element that is a child of an element X

[phrasespot]

I'll keep hunting and searching.

Module hcatmenu is loading that CSS. I am not familiar with the module but it is likely that the call is made in hcatmenu.php, or one of the templates it loads. Post the module here if it is a free module and I will be tell you exactly.

[engine411]

phrasespot, I have the same issue as Diane721, the same module and same error. Can I PM or email you the module?

[pepperr]

Ok, i found how to bypass the warrning for the Carousel. Enter BO, go to modules then Positions. You will notice that MGC Carousel of products on the home page is hooked not only on home page content, but also in the header. Click to edit MGC Carousel of products on the home page which is hooked to the header of the PS. Now do following at the third field "Exceptions:" add these pages: authentication.php,order.php,my-account.php,order-opc.php,contact-form.php. Now first clear your browsers cache, and reload these pages which were giving the don't load recommendation in google chrome. It's gone, no more!

Try it and let me know Diane721, since i know that you have troubles with this module also.

Note: your site is using SSL on all pages, you should remove this and use the correct format. Other way this fix above want work for you!

Example list: mywishlist.php,discount.php,identity.php,addresses.php,order-slip.php,order-follow.php,contact-form.php,order-opc.php,my-account.php,order.php,authentication.php,history.php,myalerts.php,payment.php

 

Note if you use different payment modules, add the secured pages to the content.

Edited May 27, 2012 by pepperr (see edit history)

[Diane721]

Hi,

 

Thank you again all for your help. Phrasespot, I got a new HCATMENU module, and it didnt give me an error. But still getting error from MGC Carousel. Pepper, I'm glad you got the carousel to work, but for me, after I put all the exceptions in, it still doesn't work. Which version of MGC carousel are use using? My module says MGC Carousel of products on the home page v0.0 I have it disabled until I get it fixed.

 

Diane

Edited May 27, 2012 by Diane721 (see edit history)

[Diane721]

{SOLVED} Ok, I got the Hcatmenu and the MGC Carousel to work by editing the corresponding .tpl files and forcing the url to point to htpps:// rather than http://

[pepperr]

Well done!

[engine411]

{SOLVED} Ok, I got the Hcatmenu and the MGC Carousel to work by editing the corresponding .tpl files and forcing the url to point to htpps:// rather than http://

Hello,

How did you do this? The first two lines of my hcatmenu.tpl (from the new module you uploaded) are the following. Did you edit the href in the 2nd line?

 

<script type="text/javascript" src="{$js_dir}tools/treeManagement.js"></script>

<link rel="stylesheet" media="all" type="text/css" href="modules/hcatmenu/hcatmenu.css