SSL HTTPS / Insecurely-Loaded Assets

[glassdomain]

Hi Guys,

 

I have installed an SSL cert on glassdomain.co.uk to the following pages:

Using wordpress HTTPs

– checkout
– cart
– Login / Register
– My Account
– wishlist/view/
– Change my Password

(I don’t want to do site wide https as this will potentially slow down the site)

I have noticed that the pages do not display the green padlock due to insecurely loaded assets.

Using the google debugging console it has thrown up the following issues where it looks like the form is referencing http:

For example:

– wishlist/view/

Mixed Content: The page at ‘https://glassdomain.co.uk/wishlist/view/&#8217; was loaded over a secure connection, but contains a form which targets an insecure endpoint <span style=”color: #ff0000;”>’http://glassdomain.co.uk/'</span&gt;. This endpoint should be made available over a secure connection.

(index):779

Mixed Content: The page at ‘https://glassdomain.co.uk/wishlist/view/&#8217; was loaded over a secure connection, but contains a form which targets an insecure endpoint <span style=”color: #ff0000;”>’http://glassdomain.co.uk/</span>&#8217;. This endpoint should be made available over a secure connection.

(index):852

Mixed Content: The page at ‘https://glassdomain.co.uk/wishlist/view/&#8217; was loaded over a secure connection, but contains a form which targets an insecure endpoint <span style=”color: #ff0000;”>’http://glassdomain.co.uk/</span>&#8217;. This endpoint should be made available over a secure connection.

(index):959

Mixed Content: The page at ‘https://glassdomain.co.uk/wishlist/view/&#8217; was loaded over a secure connection, but contains a form which targets an insecure endpoint <span style=”color: #ff0000;”>’http://glassdomain.co.uk/wishlist/view/'</span&gt;. This endpoint should be made available over a secure connection.

(index):1339

Mixed Content: The page at ‘https://glassdomain.co.uk/wishlist/view/&#8217; was loaded over a secure connection, but contains a form which targets an insecure endpoint ‘<span style=”color: #ff0000;”>http://glassdomain.co.uk/</span>&#8217;. This endpoint should be made available over a secure connection.

 

If you can help me out on this one, im sure that others must have come across this issue before?

Many thanks in advance.

[Rui Guerreiro – SUPPORT]

Hi,

You should use the HTTPs plugin.
https://wordpress.org/plugins/wordpress-https/

-Rui

[glassdomain]

This reply has been marked as private.

[David Martin – Support]

Hi,

The provided login does not work, can you check and post again?

Thanks,

David.

[glassdomain]

This reply has been marked as private.

[glassdomain]

btw i have just updated to v3 of this theme

[David Martin – Support]

Hi,

Thanks, that worked great!

Have you updated the reading settings to use the new https rather than http ?

1) Settings => General => WordPress Address (URL)

2) Settings => General => Site Address (URL)

Thanks,

David.

[glassdomain]

hi David,

Wouldn’t this make the whole site https: ?

I only want

– checkout

– cart

– Login / Register

– My Account

– wishlist/view/

– Change my Password

Pages on https:

I might be missing something though!?

Many thanks for your help so far!

[glassdomain]

This reply has been marked as private.

[David Martin – Support]

Hi Peter,

The two pages that fail to use https both use a form post action, the URL is set by the WP ‘Settings => General => Site Address (URL)’. I think that is what is causing the issue.

1) http://glassdomain.co.uk/cart/
2) http://glassdomain.co.uk/wishlist/view/

We should need to try a htaccess to redirect those URL’s, could you supply us with a FTP login?

Thanks,
David.

[glassdomain]

This reply has been marked as private.

[glassdomain]

This reply has been marked as private.

[David Martin – Support]

Hi Peter,

I have finished now and put the settings back.

If you are worried about google seeing two versions, then I strongly suggest to make the whole site https, fixing the above issues.

Thanks.

[glassdomain]

Hi, Yes i would be worried about Google seeing two versions – this just isn’t good practice from what i can see on-line.

I have made the whole site redirect to https for now. as i think this is probably the best solution of all things considered.

Thanks for your help on this.

Peter

[Rui Guerreiro – SUPPORT]

Hi,

You did it right, is the best practice being https from the beginning to the end of the purchase process. Thanks David

-Rui