Web Hosting Forum | Lunarpages


*
Welcome, Guest. Please login or register.
Did you miss your activation email?



Login with username, password and session length
May 24, 2012, 02:42:20 AM

Pages: [1]   Go Down
  Print  
Author Topic: including non-secure http links from a site with SSL  (Read 756 times)
legen21
Newbie
*
Offline Offline

Posts: 1


« on: November 06, 2011, 02:38:50 PM »

We have installed a new shopping cart on our website.  We are on a dedicated server, with our primary domain on one IP address, and our new shopping cart URL on another IP.  Lunar pages set it up this way to accommodate the SSL on our store. subdomain. 

The problem I'm having is that the new shopping cart software includes a social plugin for Facebook, etc, however with it enabled, when you go to a secure area you get a warning about the security.  Has anyone figured out a way to pass an http address from an SSL secured site "legitimately" without any security warnings? 

I can live without the social plugin, but it's a pretty serious problem not having any links back to our primary domain from our new shopping cart.  Any advise, guidance is appreciated.

Dave Alexander
LegendsOfAmerica.com
 
Logged
MrPhil
Senior Moderator
Berserker Poster
*****
Offline Offline

Posts: 5212



« Reply #1 on: November 06, 2011, 07:55:28 PM »

Mixing secure (SSL/https) and non-secure (http) on a secure page (https) can get you two kinds of warnings. Links to non-secure sites may generate a warning (when clicked) that the visitor is leaving a secure page and going to a non-secure page or site. They may even get a warning for going to another site, even if it's secure itself (it's on another domain). The other kind of warning is for non-secure images, CSS, Javascript, etc. files being requested by the browser as part of the page loading process. The visitor will usually be prompted as to whether or not they want to load the non-secure material.

I would suspect that the FB warning is not coming from the link itself, but from a logo image or the like being pulled in from the FB site or even your own site, explicitly under http (non-secure). In that case, you could keep a copy of the image in your secure site area, and modify the HTML to pull in your secure copy rather than the non-secure copy. Even if this works to prevent "non-secure content" warnings, your visitors will probably still get a warning that they are leaving your secure page when the click to go to FB. There's nothing that can be done about that, unless FB offers a secure (https) URL. The FB page is non-secure (http), and that's that.
Logged

Visit My Site

E-mail Me
  
-= From the ashes shall rise a sooty tern =-
Pages: [1]   Go Up
  Print  
 
Jump to: