Jump to content

Internet Explorer Yellow ActiveX Content Bar - Problem when using SSL only - Thx


Recommended Posts

Hi Guys,

I have a shopping cart and recently added SSL to it. The shopping cart is built in PHP but when I access it using eg https://www.xyz.com I keep getting the yellow Internet Explorer bar i.e "To help protect your security, Internet Explorer has restricted this file from running scripts or ActiveX controls that could access your computer. Click here for options... " and a pop up issuing a security warning about ActiveX controls. I don't get this error when running in non-SSL mode i.e http://www.xyz.com.

Obviously if customers are faced with this they will be completely reluctant of using the site and they won't go to the trouble of adjusting their security settings. Is there a way to workaround these pop ups? It appears the SSL cert is causing this? Should I contact the host or the shopping cart developer?

Thanks very much!

This is down to your security level setting in IE.

Does the SSL key fully match your server info? i.e. does the common name match your server hostname, etc. How did you generate the cert file? using openSSL?

Hi Neil,

I am completely new to SSL certificates. Starting out. I am hosted with Godaddy.com and they applied it to my shared hosting account. All i know is that they installed it for me so i expect its right?? I stuck the requisite ssl info into the php cart but i get the yellow bar when using it.

How can i confirm the below questions please?

Does the SSL key fully match your server info? i.e. does the common name match your server hostname, etc. How did you generate the cert file? using openSSL?

Thanks a million

You can see the cert details by clicking on the yellow padlock on the bottom toolbar on IE.

Im guessing your security settings are quite high in IE and are the cause of the popups.

Hi Neil,

Security settings are at default level in IE and i clicked on the padlock and it tells me it has been issued to my site. It says the purpose of the cert is to ensure the identity of a remote computer and it tells me the connection is encrypted and that godaddy are the issuing authority. Maybe IE doesnt recognise godaddy certs? I really dont know? It also says the certificate status is ok.

Maybe that helps?

Thanks

 

and...

This Web site is secured with a GoDaddy.com Web Server Certificate. Transactions on the site are protected with up to 256-bit Secure Sockets Layer encryption.

 

Domain Control Verified

GoDaddy.com has verified that the certificate holder controls the domain:

 

Is it possibly your use of:

 

<style type="text/css">
* html .png {//background-image: none ! important; filter: progid:DXImageTransform.Microsoft.AlphaImageLoader(src=images/logo.png,sizingMethod=crop);}
* html .png-powered {//background-image: none ! important; filter: progid:DXImageTransform.Microsoft.AlphaImageLoader(src=images/button-powered.png,sizingMethod=crop);}
</style>

 

Some quick googling revealed similiar issues resulting from the use of AlphaImageLoader

OK - Thanks. Was wondering why Alphaimage loader would effect the https version of the site but not the http version.

https://www.chestnutads.com/ causes the problems not http://www.chestnutads.com/

How I wonder do other sites get around these yellow alert bars? Maybe its down to the specific type of ssl cert i have.

???

The reason you are probably getting this is because the browser address bar is referencing the https address but elements on your page are called via the non https address i.e. image tags <img src="http://www. or iframe or stylesheets, anything really.

They should all be referenced via the https location.

Hi,

The Cart software allows me to apply SSL to only certain URLS like eg  https://www.chestnutads.com/user_login.php

 

Maybe I should reinstall the site to https://www.chestnutads.com insteat of http://www.chestnutads.com?

Thanks

Hi just spotted I have a line in the source code <script type="text/javascript" src="file:///C|/CORKAZON/SITE%20BACKUP/templates/user/js/menu.js"></script><style type="text/css">

<!-- which references javascript in my c drive - hopefully this is the fix. fingers crossed

************RESOLVED***********************

 

******YAYYYYYYYYYYYYYYYY WUUUUUUUUUUUUUUHUUUUUUUUUUUUUUUUUUUUUUUUUUUU!!!!!!!!***************

 

Problem: javasript was being referenced on the C drive.

 

Neil/Mike THANKS! Got the brain cells working! ;) ;) ;) ;) ;)

This thread is more than a year old. Please don't revive it unless you have something important to add.

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.