Hey all,
I have a page I am trying to secure and I have a problem that is preventing me from finishing this site up for the client. The following page has one issue as best I can figure it. How can I remove this or change it to https?
<script type="text/javascript" src="http://brotherscountrysupply.com/store/shopsite-images/en-US/javascript/iframe_popout.js"></script>
The other http addresses are all set as actions to forms, so this doesn't seem to stop https from working.
Any help greatly appreciated!!!
Page can be seen here: https://brotherscountrysupply.com/store/brothers-secure-ssl-cert.html
Thank you.
HTTPS - Super Important
5 posts
• Page 1 of 1
HTTPS - Super Important
by ajhauser » Wed Jan 18, 2012 1:33 am
Website Design, Website Development, eCommerce and Hosting
- ajhauser
- Posts: 84
- Joined: Tue Dec 06, 2011 4:18 pm
- Location: Earlville - the land of Earls
Re: HTTPS - Super Important
by Jim » Wed Jan 18, 2012 7:31 am
Why are you trying to make your store pages secure? There is no reason to have pages secure unless the shopper is entering information on the page. Making them secure causes more server time to be used because it must encrypt all data on the page before it is sent to the viewers browser.
What is the authorized url for your store? Preferences > Hosting Services > Store URL:
I assume that it is http://brotherscountrysupply.com/store since that is the url images are loading from.
All images and scripts will be loaded from the url specified in the authorization file for your store, Take a look at the images on https://brotherscountrysupply.com/store/toys-main.html and you will see that they are all being loaded non-securely yet the page has https not http. That will cause browser warning because you are loading non-secure items on a secure page. Normally only the billing, confirmation and thankyou pages of a store are secure because that is the only place shopper information is displayed or submitted.
If you want your store pages to be secure you would need to get a new .auth file for your store with the secure url instead of the non-secure one.
What is the authorized url for your store? Preferences > Hosting Services > Store URL:
I assume that it is http://brotherscountrysupply.com/store since that is the url images are loading from.
All images and scripts will be loaded from the url specified in the authorization file for your store, Take a look at the images on https://brotherscountrysupply.com/store/toys-main.html and you will see that they are all being loaded non-securely yet the page has https not http. That will cause browser warning because you are loading non-secure items on a secure page. Normally only the billing, confirmation and thankyou pages of a store are secure because that is the only place shopper information is displayed or submitted.
If you want your store pages to be secure you would need to get a new .auth file for your store with the secure url instead of the non-secure one.
- Jim
- Site Admin
- Posts: 4953
- Joined: Fri Aug 04, 2006 1:42 pm
- Location: Utah
Re: HTTPS - Super Important
by Jim » Wed Jan 18, 2012 2:12 pm
Ok, here is a work around to get rid of the automatically generated javascript include statement.
In your custom template where you currently have the <body> tag comment that out by putting a # as the first character of the line. Then add [-- include body.sst --] right below the commented out line and save the template. Now go to the Includes section of Custom Templates and create a new include file with the name body.sst. Edit that file and just enter the <body> tag. Save the file and publish the store and the extra javascript won't be included on your page.
The reason this works is that the code is looking for the <body> tag and automatically output the script for the javascript file when it finds that tag. However doing as mentioned above, the code just includes the body.sst file without looking in it to see what is there so the <body> tag is never found and therefore no extra code is generated. Note that you must use the tag [-- include body.sst --] and not use the PROCESS flag in the tag like [-- include body.sst PROCESS --] or the file will be processed and the <body> tag found and then the extra code would be added.
In your custom template where you currently have the <body> tag comment that out by putting a # as the first character of the line. Then add [-- include body.sst --] right below the commented out line and save the template. Now go to the Includes section of Custom Templates and create a new include file with the name body.sst. Edit that file and just enter the <body> tag. Save the file and publish the store and the extra javascript won't be included on your page.
The reason this works is that the code is looking for the <body> tag and automatically output the script for the javascript file when it finds that tag. However doing as mentioned above, the code just includes the body.sst file without looking in it to see what is there so the <body> tag is never found and therefore no extra code is generated. Note that you must use the tag [-- include body.sst --] and not use the PROCESS flag in the tag like [-- include body.sst PROCESS --] or the file will be processed and the <body> tag found and then the extra code would be added.
- Jim
- Site Admin
- Posts: 4953
- Joined: Fri Aug 04, 2006 1:42 pm
- Location: Utah
Re: HTTPS - Super Important
by ajhauser » Wed Jan 18, 2012 4:52 pm
Thank you Jim - I am sorry to put you to work like this.
The reason I need this is because I need a page with instructions on checking the cert, both for the client's information and for clients piece of mind. The page will include screenshots of "cert checking" in each of the major browsers.
I'll try this now.
Website Design, Website Development, eCommerce and Hosting
- ajhauser
- Posts: 84
- Joined: Tue Dec 06, 2011 4:18 pm
- Location: Earlville - the land of Earls
Re: HTTPS - Super Important
by ajhauser » Wed Jan 18, 2012 5:03 pm
Perfect - we're off to the races.
Thank you very much Jim, this has been killing me, and I was really hoping there was a work around that didn't involve me getting into the guts of the site files. Very cool.
Thank you very much Jim, this has been killing me, and I was really hoping there was a work around that didn't involve me getting into the guts of the site files. Very cool.
Website Design, Website Development, eCommerce and Hosting
- ajhauser
- Posts: 84
- Joined: Tue Dec 06, 2011 4:18 pm
- Location: Earlville - the land of Earls
5 posts
• Page 1 of 1
Return to Custom Template Questions
Who is online
Users browsing this forum: No registered users and 93 guests