SSL Question

[avadmin]

(Not really a webmaster)

 

Looking at a clients prestashop and configuration 1.5.6.2

 

The website has an SSL cert. the shop is set to use SSL and https on all pages

 

Friendly URL is not available ("Must activate this mod"...)

 

Get the info in Chrome / no green padlock

 

www.whynopadlock.com shows about 17 get url from index.php that are explicit http (Reason for no green padlock)

 

This is where I can't find the url souce (Not php literate)

 

So I start in  -  index.php -  apparentlly references

require(dirname(__FILE__).'/config/config.inc.php

 

So I view config.inc.php .... anyways, not understanding "how to look for what I am looking for"

 

Any advice would be appreciated,  thanks

[shokinro]

some of the URLS might be from theme file, it could be bug of a module if the link is from a module.

Or a bug of PrestaShop - if the link URL is generated via Link.php classes. You need to find out how was the URL generated and where it is from (original PrestaShop or a 3rd party module). Usually URL should be generated via Link.php class.

 

/classes/Link.php

[avadmin]

There are other posts on here regarding http links returned when all should be https - though I see none that get answered, completely- Some of the answers are that prestashop should have settings to return all https links - and possibly that htaccess doesnt get updated correctly etc

 

I have seen on another website (Cloudflare) someone reference a module that is supposed to rewrite all http tp https

 

That is what I am looking for, - am I missing something / this should be possible with prestashop shouldn't it?

[shokinro]

As I mentioned previously, first of all you need to find out where the URL of links come from, if it is used Link.php class correctly. You need to look into HTML code rendered and related theme file to find out this.

[Scully]

View the source code of the loaded page (for example start page).

You can do this in most of the common browsers by right clicking somewhere, where there is no next on the screen (context menu, show source).

 

Search for strings with

 

http://

 

Search exactly with this pattern and without an s and the end!

 

These are links you should fix. It is possible, that these links come from themes, where the ssl active is not properly checked. But it is also possible that links come from individual menu items from top horizontal menu or product, category or manufacturer text information which you might have entered by yourself.

Edited June 26, 2017 by Scully (see edit history)