Security Issues

Discussion in 'Troubleshooting' started by distressedpro, Sep 12, 2011.

  1. distressedpro

    distressedpro New Member

    Joined:
    Aug 24, 2009
    Messages:
    27
    Recently Chrome and IE9 started showing security flags on my certificates in my aMember signup pages.

    During processing Chrome throws a flag and indicates 'Mixed Scripting' as the problem. I notice this is also happening on the new version of IE. I have done' no major hacks to aMember at all, just CSS and a little template improvement here and there.

    Is anyone else having this problem?
    What can be done about it?

    This is obviously not a good shopping cart error to have.

    Thanks
  2. rsigcourses

    rsigcourses Member

    Joined:
    Mar 8, 2011
    Messages:
    46
    This is from loading resources outside of the secure root.

    Is all your files and elements that the page loads in the secured folder (IE all the javascript/css/images).

    I've got everything under https:// with no problems at all.
  3. distressedpro

    distressedpro New Member

    Joined:
    Aug 24, 2009
    Messages:
    27
    hmmm I guess I'm not sure how to know this.

    I am using Authorize.net CIM and I have the https configured in the amember panel. I have a dedicated virtual server so I can do whatever I need to.

    Are you saying that I should move my files to my /httpsdocs/ path on the server?

    This is what is currently showing in the head, and there's one image on the page

    https://www.mysite.com/amember/templates/css/reset.css
    https://www.mysite.com/amember/templates/css/amember.css
    https://www.mysite.com/amember/templates/css/custom-site.css

    But if I actually visit the httpsdocs/ folder I don't have any files in there.

    thanks for your reply
  4. skippybosco

    skippybosco CGI-Central Partner Staff Member

    Joined:
    Aug 22, 2006
    Messages:
    2,526
    I suspect you modified a template / css and added an image to your pages (logo?). When you did this you specifically defined http or https for the url. Instead use an abstracted path /images/mylogo.jpg versus http://mydomain.com/images/mylogo.jpg.
  5. distressedpro

    distressedpro New Member

    Joined:
    Aug 24, 2009
    Messages:
    27
    Awesome! I had an image but also all the jquery that was referenced like {$config.root_surl}/path I changed everything to ./path and I'm all cleared up , thanks a bunch, I should have come here before I scoured the Internet for an answer. Thanks again.
  6. skippybosco

    skippybosco CGI-Central Partner Staff Member

    Joined:
    Aug 22, 2006
    Messages:
    2,526
    Glad you got it sorted. Thanks for following up as well so if someone else runs into the issue they know how to resolve it.

Share This Page