jefffortier Posted December 6, 2014 Share Posted December 6, 2014 Hello, I have a prestashop 1.4.9 site that has some security issue: We tried to upgrade to prestashop 1.5 and then 1.6, but after the update there some bugs that I can't resolve. So we decided to stay with 1.4.9 When we go to the checkout page the browser warns us that some Item are not secure. I did a security chekon on the page and here are the results. Can somebody help me with this problem. Thanks in advance. Jeff Domain Name: larechargeenligne.caURL Tested: https://larechargeenligne.ca/order-opc.phpNumber of items downloaded on page: 131 Valid Certificate found. Certificate valid through: Aug 21 13:47:51 2015 GMTCertificate Issuer: GoDaddy.com, Inc. Total number of items: 131Number of insecure items: 8 Insecure URL: http://connect.facebook.net/fr_FR/all.jsFound in: https://larechargeenligne.ca/order-opc.php Insecure URL: http://platform.twitter.com/widgets.jsFound in: https://larechargeenligne.ca/order-opc.php Insecure URL: http://larechargeenligne.ca/modules/blockautosearch/jquery.autocomplete.jsFound in: https://larechargeenligne.ca/order-opc.php Insecure URL: http://larechargeenligne.ca/modules/blockautosearch/blockautosearch.cssFound in: https://larechargeenligne.ca/order-opc.php Insecure URL: http://larechargeenligne.ca/modules/blockautosearch/autocomplete.jsFound in: https://larechargeenligne.ca/order-opc.php Insecure URL: http://larechargeenligne.ca/modules/rezo/img/fic_20141111211320.pngFound in: https://larechargeenligne.ca/order-opc.php Insecure URL: http://larechargeenligne.ca/modules/rezo/img/fic_20141111211905.pngFound in: https://larechargeenligne.ca/order-opc.php Insecure URL: http://larechargeenligne.ca/modules/blockautosearch/indicator.gifFound in: http://larechargeenligne.ca/modules/blockautosearch/blockautosearch.css Insecure <form> call. Found on line # 249 in file: larechargeenligne.ca/order-opc.php Insecure <form> call. Found on line # 5124 in file: larechargeenligne.ca/order-opc.php (Note: Chrome will show a security error for any secure page with an insecure <form> call on the page) Link to comment Share on other sites More sharing options...
shacker Posted December 7, 2014 Share Posted December 7, 2014 all these items are scripts from external sites, as modules, maybe you can modify each module to load the js or css from a secure url like this facebook call https://connect.facebook.net/fr_FR/all.js Link to comment Share on other sites More sharing options...
tuk66 Posted December 17, 2014 Share Posted December 17, 2014 The question is - do you really need SSL? Even so, all your payments are secure. Link to comment Share on other sites More sharing options...
Recommended Posts