ansaurus

Question

IE - "This page contains both secure and non-secure items"...

Answer 1

+1 A:

On any page accessed with SSL, check that any Ajax requests are using SSL, or IE will complain. Also, if you have a Google Analytics on your page, change it from http://www.google-analytics.com/urchin.js to https://ssl.google-analytics.com/urchin.js.

Gav 2009-08-05 18:47:27

There isn't any GA code, but the "new" GA code (been around for over a year) handles HTTPS fine. So if you're using urchin.js, I'd recommend upgrading to ga.js.

DisgruntledGoat 2009-08-05 18:55:13

Answer 2

+1 A:

There is a geotrust.com link on the page, is that https?
I also see a lot of http links to your .co.uk site itself.

nik 2009-08-05 18:48:14

Thanks - yes, I think the geotrust link is https://. The links to our .co.uk site should be absolute, if I understand it right, so that they don't lead searchbots off into a duplicate, https version, of our entire site - but that shouldn't cause any errors, should it?

Luke Skinner 2009-08-05 19:24:31

@Luke, I did a quick scan with something like `CptSkippy`. Felt the `geotrust.com` link was a problem.. guess its not.

nik 2009-08-06 05:02:00

Answer 3

+1 A:

Have you checked all the scripts and stylesheets you're using for external references? Maybe there's a background image referenced with http:// ?

I noticed a couple of things in the code. First, the geotrust.com script - does // at the start use the current protocol? I've never seen that before. Second, some AJAX - again, make sure this is calling https.

Try removing an element or two at a time and see if the problem goes away. Another thing you can do in scripts, is check for https ("paraphrased" from Google Analytics code):

var jsHost = ( (document.location.protocol == "https:") ? "https://" : "http://" );
document.write(unescape("%3Cscript src='" + jsHost + "YOURSITE.COM' type='text/javascript'%3E%3C/script%3E"));

DisgruntledGoat 2009-08-05 18:48:18

Answer 4

+5 A:

These are all the resources called when you load that page.

So on line 328 change...

<!-- GeoTrust QuickSSL [tm] Smart  Icon tag. Do not edit. -->
<SCRIPT LANGUAGE="JavaScript"  TYPE="text/javascript"  
SRC="//smarticon.geotrust.com/si.js"></SCRIPT>
<!-- end  GeoTrust Smart Icon tag -->

to...

<!-- GeoTrust QuickSSL [tm] Smart  Icon tag. Do not edit. -->
<SCRIPT LANGUAGE="JavaScript"  TYPE="text/javascript"  
SRC="https://smarticon.geotrust.com/si.js"&gt;&lt;/SCRIPT&gt;
<!-- end  GeoTrust Smart Icon tag -->

CptSkippy 2009-08-05 18:53:32

BTW - I used Tamper Data(https://addons.mozilla.org/en-US/firefox/addon/966) for FireFox to generate that list. It's an invaluable tool for debugging and hacking the web.

CptSkippy 2009-08-05 19:03:15

Thanks - I don't think this is it though (would be ironic, wouldn't it, if it were the Geotrust Seal causing these messages!). Both Fiddler and HttpFox say it's pulling those links through https:// - isn't that what the src="//" is intended to do? (Never seen it before, just guessing).

Luke Skinner 2009-08-05 19:19:52

Answer 5

+2 A:

I think it's your rotating image gallery. If that's removed, the error goes away. Move the "startGallery" script block after the "myGallery" div, then change this line...

window.onDomReady(startGallery);

to just

startGallery();

David 2009-08-05 19:00:04

Brilliant - thanks. That seems to get rid of the non-secure malarkey, but now the JS isn't working and I wouldn't have a clue how to sort that. The error I'm getting is Webpage error detailsMessage: Object doesn't support this property or methodLine: 87Char: 3Code: 0"URI: https://www.droverholidays.co.uk/scripts/jd.gallery.js"

Luke Skinner 2009-08-05 19:14:15

Doh - sorry, I'm going too quickly. I didn't read your full solution. I've now moved the script block as you said, it gets further, but still doesn't load the images:Webpage error detailsMessage: 'this.galleryData.0.image' is null or not an objectLine: 266Char: 4Code: 0"URI: https://www.droverholidays.co.uk/scripts/jd.gallery.js"

Luke Skinner 2009-08-05 19:17:55

I had a similar issue using the cloud-zoom jquery plugin on IE7. I don't understand why, but moving it out of jQuery(document).ready solved the problem.

Alexandre L Telles 2010-06-11 20:23:15

@David, How did you narrow down the issue causing that problem? I would love to know that, because I'm stuck on the same kind of problem. Don't know if you will reply, i'm commenting on a 1 year old thread.

Raja 2010-07-28 17:26:00

To narrow down the problem, I would just start removing code until the problem goes away.

David 2010-07-29 13:59:48

Answer 6

A:

Thanks all - brilliant to be able to get access to so much expertise so quickly!

It seems David had the right answer, unofrtunately my lack of understanding of JS means that the script no longer works, but I've asked another question about that so hopefully someone can help me with that one too. Failing that we'll just have to have a stationary image on this particular page which is better than alarming visitors using IE, I guess!

Many thanks again to you all for your time.

Luke Skinner 2009-08-05 20:37:21

ansaurus

tags:

views:

answers:

IE - "This page contains both secure and non-secure items"...

related questions