RuposTel Support Forum

by **neil@.....uk** » Mon Jul 30, 2012 7:22 pm

Hi all, my cart is displaying insecure content when in SSL (https)

Looking at vmpanels.css - all links are relative!

by **admin** » Thu Aug 09, 2012 2:52 pm

Hello, it seems that some other components, plugins or modules which load the content for you don't recognize that the page is running under https. We suggest to check Virtuemart's menu item (for the checkout if existent) if it is set to use https. In most cases for a new sites it is much better to search content of you php files for the inclusion of such scripts, css and images and fix them in the specific file which renders them.

In OPC please enable https support so it always renders it's inclusions with https.

I hope this helped,
Best Regards,
Stan

by **neil@.....uk** » Mon Aug 27, 2012 12:00 am

Hi Stan, I've checked everything... PHP files, CSS, JS etc etc and just can't figure out where it's being called from..

On further inspection - viewing the source code for the cart page this is what I get...

<link rel="stylesheet" href="/components/com_virtuemart/assets/css/vmsite-ltr.css" type="text/css" />
<link rel="stylesheet" href="/components/com_onepage/themes/icetheme_thestore/onepage.css" type="text/css" />
<link rel="stylesheet" href="http://www.bodhi.uk.com/components/com_virtuemart/assets/css/vmpanels.css" type="text/css" />
<link rel="stylesheet" href="/components/com_onepage/themes/icetheme_thestore/tabcontent1.css" type="text/css" />

<script src="http://www.bodhi.uk.com/components/com_virtuemart/assets/js/jquery.ui.autocomplete.html.js" type="text/javascript"></script>
<script src="http://www.bodhi.uk.com/components/com_virtuemart/assets/js/jquery.noConflict.js" type="text/javascript"></script>

Note the ones in bold are being called in http... Everything else is relative.

This is the source code for the Cart but I don't understand why it's generating links for http? I've had this problem for weeks now and i'm going round in circles. Anyone have any ideas?

by **admin** » Tue Sep 04, 2012 10:20 am

hello neil, we checked the latest SVN on https but we don't get such an error here (https://www.rupostel.com/svnonj25/) I think this is either done by an older version of VM or by some of your theme or third party extension. To find out which file prints these lines, make a full text search over your files. We found that:

vmpanel.css is included in invoice.php, order's details.php, user edit view edit.php, edit_address.php They all use JURI::root().'components....
Maybe due to some specif apache/ngingx/or windows configuration Joomla can't detect the https URL and you may want to change JURI::root() to JURI::root(true) so it uses relative paths and does not give any error for the https.

The autocomplete in the latest svn should not load at all at the checkout page and can cause many issues. Please search which component could possible include it. In the latest SVN it is only included for backend section within config.php (/administrator/components/com_virtuemart/helpers/config.php).

In virtuemart 2.0.0 (and some later versions) it does not use JURI::root(), but rather JURI::base() which does not always return a correct data. It also includes the autocomplete javascript by default at the frontend as well - you may want to have a look into the above config.php.

Best Regards,
Stan

RuposTel Support Forum

Insecure content HTTPS

Insecure content HTTPS

Re: Insecure content HTTPS

Re: Insecure content HTTPS

Re: Insecure content HTTPS