SSL and Javascript/CSS

Ecommerce design Joomla template to start your online business with VirtueMart and additional eshop features.
GK User
Fri Feb 04, 2011 1:36 am
hi guys,

when i enable SSL from Joomla and Virtuemart, I get partially encrypted page error. I access this page via IE and it gives an option load "secure elements only". This helps a lot to understand where the problem is.

on thing, CSS is completely disabled. Is there a workaround for that?

check here

thank you
User avatar
Senior Boarder

GK User
Sat Feb 05, 2011 2:22 am
hi again,

I understand you think there is something to do with virtuemart, but this is not correct. I have enclosed two screenshots, one with previous template and with yourshop template.

There are no errors with the previous template, everything works ok. as soon as I change to "yourshop" template I hit the same problem: unsecure elements.

Like I mentioned above, if I use IE and select to view secure items only, then all I see is garbled text. To me this is a sytling related issue. There must be somewhere in the template where secure url's are not defined.

please can one of the moderators/admins take a look at this?

thank you
User avatar
Senior Boarder

GK User
Sat Feb 05, 2011 11:33 pm
ok guys, I found few things but I still need your help;

I enabled "CSS compression" from Dev Mode in template settings, and with this it looks a lot closer to normal page. As I explained before, if I visit my website with IE and show secure items only, css doesnt work and page looks completely wrong. anyway, with css compression, it is so much better.

Now I need your help with javascript related things, they dont show on the mainpage if only secure items displayed (IE). These are:

- Image slide show (both images and css for this module are shown as http:// in the source code, they are not relative)
- Mega menu
- Shopping cart


thanks..
User avatar
Senior Boarder

GK User
Tue Feb 08, 2011 10:43 am
Guys,

I'm not impressed with the support Im getting -actually not getting. ok I dont have a VIP support, but also I dont expect a VIP support within 12 hours. All I am asking is a bit of guidence here.

This template (yourshop) is primarily designed for Virtuemart, but on the other hand it doesnt support SSL for some reason. Surely not everybody needs or uses SSL but it is also not uncommon to use SSL on a e-commerce site.

On my above posts, I have explained & proved that it is a template related issue. If I knew programming, I wouldnt ask for your help. Furthermore I wouldnt pay for club membership as I would do my own.

Keeping quiet is not helping anybody here. If you say "this template is not and will not be SSL compatible and try another template" you will be at least honest.

I hope somebody takes their time to respond. Do you need extra payment? If this is the case please say it. Not replying is the worst thing.

thanks
User avatar
Senior Boarder

teitbite
Sun Feb 13, 2011 8:40 pm
Hi

Finally, the answer from our programmer :)

Please edit libraries/joomla/environment/uri.php

In getInstance method please change in code:

Code: Select all
// Determine if the request was over SSL (HTTPS)
if (isset($_SERVER['HTTPS']) && !empty($_SERVER['HTTPS']) && (strtolower($_SERVER['HTTPS']) != 'off')) {
   $https = 's://';
} else {
   $https = '://';
}


else condition to

Code: Select all
$https = 's://';


Than please tell us what the addresses look like.
User avatar
Moderator

GK User
Sun Feb 13, 2011 10:24 pm
hi teitbite,

thank you for the suggestion. I changed it but still have the same problem. please let your programmer this is a javascript (or similar) related problem; everything opens fine in https except 1) megamenu 2) imageslide show and 3)shopping cart. so there is something effecting the all three. this might help him/her to find the problem. visit this link with internet explorer and say "yes" when prompted to see yourself.

again, thanks a lot for your help.
User avatar
Senior Boarder

teitbite
Tue Feb 15, 2011 3:49 pm
Hi

Sand once again to the programmer.
User avatar
Moderator

GK User
Fri Feb 18, 2011 4:21 pm
Please send me the FTP access to your website (dziudek[at]gavick[dot]com). I've checked the code and in all places of our template the JURI class is used so it is the problem.
User avatar
Administrator

GK User
Fri Feb 18, 2011 10:02 pm
hi, I've just sent you an email & thanks for your help.
User avatar
Senior Boarder

GK User
Mon Feb 21, 2011 3:12 am
Was there a solution to this issue, because I am experiencing it as well?

https://www.aureustech.co.za
User avatar
Fresh Boarder

teitbite
Mon Feb 21, 2011 9:22 pm
Hi

It was a joomla problem.

Please in configuration.php change

Code: Select all
var $live_site = 'http://www.xxxxxxxxx.com';


to

Code: Select all
var $live_site = 'https://www.xxxxxxxxx.com';
User avatar
Moderator

GK User
Tue Feb 22, 2011 4:20 am
Hi
I already edited that specific file, but even with that edit the problem persists.

http://www.aureustech.co.za

I even tried disabling some of the modules to see whether or not it was them that caused the issue, but with no luck.

Virtuemart settings was updated as well to accommodate the new SSL. But I can't find the problem that keeps breaking the seal.
User avatar
Fresh Boarder

teitbite
Tue Feb 22, 2011 4:03 pm
Hi

Please tell me an example where You have that problem. I've clicked Your site, and it was always with SSL.
User avatar
Moderator

GK User
Tue Feb 22, 2011 4:17 pm
The following happens. Picture 1 as attached is how the SSL should display showing the full security certificate and information. This is only visible when in pages not displaying the theme or any other script.

The second picture is the actual site. This means that the site is not secure, and that something on the site broke the SSL seal.

I have changed all the links on the site to secure pages within the website. So it must be something else breaking the seal. I have disabled every custom module, script and link in the page with no success, thus bringing me to the conclusion it has to be something within the theme itself that causes the seal to break. Which was confirmed by my security provider.

I am using the latest updated version of Firefox, and I've tested it in Internet Explorer 9.
User avatar
Fresh Boarder

GK User
Tue Feb 22, 2011 4:17 pm
The following happens. Picture 1 as attached is how the SSL should display showing the full security certificate and information. This is only visible when in pages not displaying the theme or any other script.

The second picture is the actual site. This means that the site is not secure, and that something on the site broke the SSL seal.

I have changed all the links on the site to secure pages within the website. So it must be something else breaking the seal. I have disabled every custom module, script and link in the page with no success, thus bringing me to the conclusion it has to be something within the theme itself that causes the seal to break. Which was confirmed by my security provider.

I am using the latest updated version of Firefox, and I've tested it in Internet Explorer 9.
ssl1_2011-02-22.JPG


ssl2_2011-02-22.JPG
User avatar
Fresh Boarder

teitbite
Wed Feb 23, 2011 2:48 am
Hi

Ok. I'm sending it to programmer one more time.
User avatar
Moderator

teitbite
Thu Feb 24, 2011 1:10 am
Hi

Please show me an exact page where this problem exists because when I'm clicking throught it's always the same.
User avatar
Moderator

GK User
Thu Feb 24, 2011 3:28 am
I fixed that issue before you could reply. Thanks for all the help :)
User avatar
Fresh Boarder

GK User
Fri Feb 25, 2011 1:13 am
hi aureustech,

could you let us know how you resolved the problem for us? thanks..
User avatar
Senior Boarder

GK User
Fri Feb 25, 2011 1:27 am
After I investigated the layout of the site and the content I finally came across the issue. Some images posted to the site were sourced from unsecured servers. For instance this page draws images from the Samsung server and thus it breaks the seal:
https://www.aureustech.co.za/products/n ... te-netbook

Other sites that have no images or have images that are secured will not break the seal:
https://www.aureustech.co.za

As the SSL Provider stated there were unsecured links, but what they didn't specify was that the images needed to be secure as well. I downloaded external images to my server and relinked them. Now the site seal remains intact, except for certain product pages, which is not such a big deal...as long as the pages that need to be secure, are.

Hope this helps.
User avatar
Fresh Boarder

teitbite
Fri Feb 25, 2011 4:07 am
Hi

Och, so that was the problem :) Thanks for that answer. I've learned something from it also :)
User avatar
Moderator


cron