HTTPS (SSL) - insecure contents

[dadoun9]

My website doesnt display the content properly when i go into HTTPS mode. This is a problem only with google chrome because it detects unsecure content on my website.

 

My hosting company told me its because there is an issue wth my theme; there is unsecure links in my theme so i need to fix that!

 

 

I was told to alter my 'header.tpl' file on line 29 (in file manager):

<link href='http://fonts.googleapis.com/css?family=Gruppo' rel='stylesheet' type='text/css'>

 

i removed http in this code, but still no results. I still have the same problem with google chrome that detects insecure content when in https mode.

 

My last reply from a manager was:

Please note that the SSL issue is not related to the template. Not sure why but you PrestaShop is loading CSS and JS files via HTTP (no matter which protocol is used).

 

Please help!

Thanks for your replies!

 

My last reply from a manager was:

Please note that the SSL issue is not related to the template. Not sure why but you PrestaShop is loading CSS and JS files via HTTP (no matter which protocol is used).

[dadoun9]

Someone can help me?

[Bill Dalton]

You need to add https,

 

I do the same to mine.

 

So it will look like,

 

<link href='https://fonts.googleapis.com/css?family=Gruppo' rel='stylesheet' type='text/css'>

[dadoun9]

I tried that, but doesn't change anything.

[Bill Dalton]

Then you must have other as well. Can you link to your web site?

[Bill Dalton]

For example in my theme,

 

<link href='https://fonts.googleapis.com/css?family=Playfair+Display' rel='stylesheet' type='text/css' />
    <link href='https://fonts.googleapis.com/css?family=Open+Sans+Condensed:300' rel='stylesheet' type='text/css' />
    <link href='https://fonts.googleapis.com/css?family=Open+Sans' rel='stylesheet' type='text/css' />

[dadoun9]

This what i have in my header.tpl:

 

 

{if isset($css_files)}

{foreach from=$css_files key=css_uri item=media}

<link href="{$css_uri}" rel="stylesheet" type="text/css" media="{$media}" />

{/foreach}

{/if}

<link href='http://fonts.googleapis.com/css?family=Gruppo' rel='stylesheet' type='text/css' />

{if isset($js_files)}

{foreach from=$js_files item=js_uri}

<script type="text/javascript" src="{$js_uri}"></script>

{/foreach}

{/if}

{$HOOK_HEADER}

<script type="text/javascript" src="{$js_dir}cookies.js"></script>

<script type="text/javascript" src="{$js_dir}script.js"></script>

<script type="text/javascript" src="{$js_dir}jscript_xjquery.jqtransform.js"></script>

[Bill Dalton]

You must change,

<link href='http://fonts.googleapis.com/css?family=Gruppo' rel='stylesheet' type='text/css' />

 

to

 

<link href='https://fonts.googleapis.com/css?family=Gruppo' rel='stylesheet' type='text/css' />

 

Then, in order to see the change you must delete all the cache files in your browser, and the cache files created by PS.

 

In PS v1.5x the cache files are found in 2 places,

 

prestashop > cache

prestashop > theme > yourtheme > cache

 

alternatively you can set Prestashop to override the cache files

 

 

BO > Advanced Parameters > Performance

 

Set Template Cache to Force compilation

 

Set Cache to disabled.

 

You need change the above settings or delete the cache files and delete your browser cache after making some changes to PS. Otherwise you are just using a cached copy of the old file and not the new file that has your change.

Edited February 14, 2013 by Bill Dalton (see edit history)

[dadoun9]

I did all this, but still having same problem. I used the option force compile...

[Bill Dalton]

When you have the page loaded in your browser, view the source code and search for http

 

Regardless if the fault is PS VS. your theme, all links that are called will be in the source code.

 

Hope this helps.

[Narcyzo]

HI, I have the same problem but i don.t have this line (<link href='http://fonts.googleapis.com/css?family=Gruppo' rel='stylesheet' type='text/css' />) on my header.tpl, Any solution ¿?

[Bill Dalton]

Can you give a link to your web site?

[Narcyzo]

Can you give a link to your web site?

 

 

Yea Bill, SHOPINTIMO.COM , When the SSL activate , the font change and i don t have any line Http on header.tpl

 

 

 

 

[Bill Dalton]

The domain you posted is not working.

[Narcyzo]

www.shopintimo.es , not.com, sorry

[Bill Dalton]

In,

 

/themes/chakana/css/global.css

 

You will find,

 

@import url("http://fonts.googleapis.com/css?family=Open+Sans+Condensed:300,300italic,700");

@import url(http://fonts.googleapis.com/css?family=Playball);

 

Change them to https://

[Narcyzo]

In,

 

/themes/chakana/css/global.css

 

You will find,

 

@import url("http://fonts.googleapis.com/css?family=Open+Sans+Condensed:300,300italic,700");

@import url(http://fonts.googlea...family=Playball);

 

Change them to https://

 

Hey, Bill Dalton, Problem solved, thank`s.

Best Regards

[nisheednair]

When you have the page loaded in your browser, view the source code and search for http

 

Regardless if the fault is PS VS. your theme, all links that are called will be in the source code.

 

Hope this helps.

 

 

Is there any quick way to change HTTP to HTTPS in all file?

[Bill Dalton]

In Prestashop you set your SSL domain here,

 

Preferences > SEO & URLs

 

Prestashop will then turn on SSL in all areas of your web site where customer data is required.

 

If you want your entire web site under SSL, that would take custom programming.

[Inpromark]

Hi Bill

What you mean by seting up the SSL in Preferences > SEO & URLs. What shoul I do?

I have this problem with secure and nonsecure items on my site and I need help as I have no idea where I can find those links

I have resolt from this site: http://www.whynopadlock.com/check.php and now I need a solution how to fix those links (mostly img/cms links)

[triplei]

STEP 1:

 

Go to Preferences --->SEO & URL and set shop and SSL to "www.yourdomain.com"

 

STEP 2:

Go to Preferences --->General make sure SSL is set to "NO"

 

STEP3:

Go to your .htaccess file (in your root folder of the server) and use the following code

RewriteEngine On
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://www.yourdomain.com/$1 [R,L]

Put this code in before <ifModule mod_rewrite.c>

 

STEP4:

While in the .htaccess file, make sure rewriteCond says ^www.yourdomain.com$  NOT ^yourdomain.com$

 

STEP5 ENJOY!