howie2007 Posted September 8, 2008 Share Posted September 8, 2008 Hi Guys, I have a shopping cart and recently added SSL to it. The shopping cart is built in PHP but when I access it using eg https://www.xyz.com I keep getting the yellow Internet Explorer bar i.e "To help protect your security, Internet Explorer has restricted this file from running scripts or ActiveX controls that could access your computer. Click here for options... " and a pop up issuing a security warning about ActiveX controls. I don't get this error when running in non-SSL mode i.e http://www.xyz.com. Obviously if customers are faced with this they will be completely reluctant of using the site and they won't go to the trouble of adjusting their security settings. Is there a way to workaround these pop ups? It appears the SSL cert is causing this? Should I contact the host or the shopping cart developer? Thanks very much! Quote Link to comment Share on other sites More sharing options...
JonnoTheDev Posted September 8, 2008 Share Posted September 8, 2008 This is down to your security level setting in IE. Does the SSL key fully match your server info? i.e. does the common name match your server hostname, etc. How did you generate the cert file? using openSSL? Quote Link to comment Share on other sites More sharing options...
howie2007 Posted September 8, 2008 Author Share Posted September 8, 2008 Hi Neil, I am completely new to SSL certificates. Starting out. I am hosted with Godaddy.com and they applied it to my shared hosting account. All i know is that they installed it for me so i expect its right?? I stuck the requisite ssl info into the php cart but i get the yellow bar when using it. How can i confirm the below questions please? Does the SSL key fully match your server info? i.e. does the common name match your server hostname, etc. How did you generate the cert file? using openSSL? Thanks a million Quote Link to comment Share on other sites More sharing options...
JonnoTheDev Posted September 8, 2008 Share Posted September 8, 2008 You can see the cert details by clicking on the yellow padlock on the bottom toolbar on IE. Im guessing your security settings are quite high in IE and are the cause of the popups. Quote Link to comment Share on other sites More sharing options...
howie2007 Posted September 8, 2008 Author Share Posted September 8, 2008 Hi Neil, Security settings are at default level in IE and i clicked on the padlock and it tells me it has been issued to my site. It says the purpose of the cert is to ensure the identity of a remote computer and it tells me the connection is encrypted and that godaddy are the issuing authority. Maybe IE doesnt recognise godaddy certs? I really dont know? It also says the certificate status is ok. Maybe that helps? Thanks Quote Link to comment Share on other sites More sharing options...
howie2007 Posted September 8, 2008 Author Share Posted September 8, 2008 and... This Web site is secured with a GoDaddy.com Web Server Certificate. Transactions on the site are protected with up to 256-bit Secure Sockets Layer encryption. Domain Control Verified GoDaddy.com has verified that the certificate holder controls the domain: Quote Link to comment Share on other sites More sharing options...
JonnoTheDev Posted September 8, 2008 Share Posted September 8, 2008 What is the URL? Quote Link to comment Share on other sites More sharing options...
howie2007 Posted September 8, 2008 Author Share Posted September 8, 2008 Hi, https://www.chestnutads.com I was wondering if the PHP code was causing it? Thanks Quote Link to comment Share on other sites More sharing options...
mikeschroeder Posted September 8, 2008 Share Posted September 8, 2008 Is it possibly your use of: <style type="text/css"> * html .png {//background-image: none ! important; filter: progid:DXImageTransform.Microsoft.AlphaImageLoader(src=images/logo.png,sizingMethod=crop);} * html .png-powered {//background-image: none ! important; filter: progid:DXImageTransform.Microsoft.AlphaImageLoader(src=images/button-powered.png,sizingMethod=crop);} </style> Some quick googling revealed similiar issues resulting from the use of AlphaImageLoader Quote Link to comment Share on other sites More sharing options...
howie2007 Posted September 8, 2008 Author Share Posted September 8, 2008 Thanks Mike - will look into it. I dont even know what it does or if it is needed or can be substituted. I appreciate the time u've taken Quote Link to comment Share on other sites More sharing options...
mikeschroeder Posted September 8, 2008 Share Posted September 8, 2008 I *Believe* its for adding Alpha support to .png files in IE http://msdn.microsoft.com/en-us/library/ms532969.aspx Quote Link to comment Share on other sites More sharing options...
JonnoTheDev Posted September 8, 2008 Share Posted September 8, 2008 I dont get any popups in firefox and IE states that the page contains some insecure items which is a common popup on https requests. Quote Link to comment Share on other sites More sharing options...
howie2007 Posted September 8, 2008 Author Share Posted September 8, 2008 OK - Thanks. Was wondering why Alphaimage loader would effect the https version of the site but not the http version. https://www.chestnutads.com/ causes the problems not http://www.chestnutads.com/ How I wonder do other sites get around these yellow alert bars? Maybe its down to the specific type of ssl cert i have. ??? Quote Link to comment Share on other sites More sharing options...
JonnoTheDev Posted September 8, 2008 Share Posted September 8, 2008 The reason you are probably getting this is because the browser address bar is referencing the https address but elements on your page are called via the non https address i.e. image tags <img src="http://www. or iframe or stylesheets, anything really. They should all be referenced via the https location. Quote Link to comment Share on other sites More sharing options...
howie2007 Posted September 8, 2008 Author Share Posted September 8, 2008 Ok thanks Neil - I will check that Quote Link to comment Share on other sites More sharing options...
howie2007 Posted September 8, 2008 Author Share Posted September 8, 2008 Hi, The Cart software allows me to apply SSL to only certain URLS like eg https://www.chestnutads.com/user_login.php Maybe I should reinstall the site to https://www.chestnutads.com insteat of http://www.chestnutads.com? Thanks Quote Link to comment Share on other sites More sharing options...
howie2007 Posted September 8, 2008 Author Share Posted September 8, 2008 Hi just spotted I have a line in the source code <script type="text/javascript" src="file:///C|/CORKAZON/SITE%20BACKUP/templates/user/js/menu.js"></script><style type="text/css"> <!-- which references javascript in my c drive - hopefully this is the fix. fingers crossed Quote Link to comment Share on other sites More sharing options...
howie2007 Posted September 8, 2008 Author Share Posted September 8, 2008 ************RESOLVED*********************** ******YAYYYYYYYYYYYYYYYY WUUUUUUUUUUUUUUHUUUUUUUUUUUUUUUUUUUUUUUUUUUU!!!!!!!!*************** Problem: javasript was being referenced on the C drive. Neil/Mike THANKS! Got the brain cells working! ;) ;) Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.