Secure page problem

[tshad]

I have a problem with a page I am trying to secure. It has a flash object
as well as a couple of 3rd party objects used for tracking use of the page.
I keep getting a message saying that there are unsecure items on the page.
I assume this is because of some absolute URL paths. But one of them
doesn't cause the problem and it also has an absolute URL in it.

The first 2 cause an error:
************************************************************
<object classid="clsid27CDB6E-AE6D-11cf-96B8-444553540000"
codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7,0,19,0"
width="335" height="85" title="StaffingWorkshop">
<param name="movie" value="../flash/sw.swf">
<param name="quality" value="high">
<embed src="../flash/sw.swf" quality="high"
pluginspage="http://www.macromedia.com/go/getflashplayer"
type="application/x-shockwave-flash" width="335" height="85">
</embed>
</object>

<!-- OPENTRACKER HTML START -->
<script defer
src="http://server1.opentracker.net/?site=www.staffingworkshop.com">
</script><noscript>
<a href="http://www.opentracker.net" target="_blank">
<img
src="http://img.opentracker.net/?cmd=nojs&site=www.staffingworkshop.com"
alt="web tracker" border="0"></a> </noscript>
<!-- OPENTRACKER HTML END -->
***************************************************************

This one doesn't cause an error but it also has 2 absolute URLs in it.
***************************************************************
<div id="ci7eh6" style="z-index:100;position:absolute">
</div>
<div id="sc7eh6" style="display:inline">
</div>
<div id="sd7eh6" style="display:none">
</div>
<script type="text/javascript">var se7eh6=document.createElement("script");
se7eh6.type="text/javascript";se7eh6.defer=true;se7eh6.src=(location.protocol.indexOf("https")==0? "https://secure.providesupport.com/image":"http://image.providesupport.com")+ "/js/ftshr/safe-standard.js?ps_h=7eh6\u0026ps_t="+ new Date().getTime();document.getElementById("sd7eh6").appendChild(se7eh6)</script><noscript><div style="display:inline"><a href="http://www.providesupport.com?messenger=ftshr">LiveSupport</a></div></noscript>****************************************************************Why does it work and the others not work?Is there a way I can make the others work?Thanks,Tom

 

[MasterGaurav \(www.edujini-labs.com\)]

I have a problem with a page I am trying to secure. It has a flash object

as well as a couple of 3rd party objects used for tracking use of the page.
I keep getting a message saying that there are unsecure items on the page.
I assume this is because of some absolute URL paths. But one of them
doesn't cause the problem and it also has an absolute URL in it.

By secure I assume that you are moving on to https.
If so, some components, as I could see, are coming from http, and hence the
issue.


--
Happy Hacking,
Gaurav Vaish | www.mastergaurav.com
www.edujini-labs.com
http://eduzine.edujini-labs.com
-----------------------------------------

 

[tshad]

By secure I assume that you are moving on to https.
If so, some components, as I could see, are coming from http, and hence
the issue.

Right.

But the 3rd object also has http://www.providesupport.com?messenger=ftshr
and there doesn't seem to be a problem there?

Is there a way around the http problem on a secure page (ssl/https)?

All of our pages come from templates that have these objects on them and
would like the pages to look the same on the secure pages.

Thanks,

Tom

 

[MasterGaurav \(www.edujini-labs.com\)]

Is there a way around the http problem on a secure page (ssl/https)?

The browsers, as should *good browsers* be expected to, report a warning if
there is a mixed-content.

The only alternative is to use relative paths to ensure that HTTP or
HTTPS... it's always the same for all items.

All of our pages come from templates that have these objects on them and
would like the pages to look the same on the secure pages.

If these *objects* are hosted on the same server, using relative paths
should be trivial.


--
Happy Hacking,
Gaurav Vaish | www.mastergaurav.com
www.edujini-labs.com
http://eduzine.edujini-labs.com
-----------------------------------------