CODEWITHSUNDEEP
internet-explorerhttpssecurity
Luke Skinner
Luke Skinner

Reputation: 25

IE - "This page contains both secure and non-secure items"

I've googled and googled for an answer to this and have found loads of answers - all saying pretty much the same thing. Remove any absolute references to images, scripts etc. I did that, but it's made no difference.

I searched the code for the string "http://" and made them relative (I've then changed some of the outbound links back to http to prevent searchbots finding a duplicate (https) version of our entire site) - but I don't think that's a problem, is it?

Please, could anyone take a look at the code, and see if they can find anything? The page is here: https://www.droverholidays.co.uk/bikehireform.php

Many, many thanks in advance!

Upvotes: 2

Views: 2213

Answers (5)

David
David

Reputation: 34563

I think it's your rotating image gallery. If that's removed, the error goes away. Move the "startGallery" script block after the "myGallery" div, then change this line...

window.onDomReady(startGallery);

to just

startGallery();

Upvotes: 2

MyItchyChin
MyItchyChin

Reputation: 14031

These are all the resources called when you load that page.

So on line 328 change...

<!-- GeoTrust QuickSSL [tm] Smart  Icon tag. Do not edit. -->
<SCRIPT LANGUAGE="JavaScript"  TYPE="text/javascript"  
SRC="//smarticon.geotrust.com/si.js"></SCRIPT>
<!-- end  GeoTrust Smart Icon tag -->

to...

<!-- GeoTrust QuickSSL [tm] Smart  Icon tag. Do not edit. -->
<SCRIPT LANGUAGE="JavaScript"  TYPE="text/javascript"  
SRC="https://smarticon.geotrust.com/si.js"></SCRIPT>
<!-- end  GeoTrust Smart Icon tag -->

Upvotes: 5

DisgruntledGoat
DisgruntledGoat

Reputation: 72510

Have you checked all the scripts and stylesheets you're using for external references? Maybe there's a background image referenced with http:// ?

I noticed a couple of things in the code. First, the geotrust.com script - does // at the start use the current protocol? I've never seen that before. Second, some AJAX - again, make sure this is calling https.

Try removing an element or two at a time and see if the problem goes away. Another thing you can do in scripts, is check for https ("paraphrased" from Google Analytics code):

var jsHost = ( (document.location.protocol == "https:") ? "https://" : "http://" );
document.write(unescape("%3Cscript src='" + jsHost + "YOURSITE.COM' type='text/javascript'%3E%3C/script%3E"));

Upvotes: 1

nik
nik

Reputation: 13450

There is a geotrust.com link on the page, is that https?
I also see a lot of http links to your .co.uk site itself.

Upvotes: 1

Gav
Gav

Reputation: 11460

On any page accessed with SSL, check that any Ajax requests are using SSL, or IE will complain. Also, if you have a Google Analytics on your page, change it from http://www.google-analytics.com/urchin.js to https://ssl.google-analytics.com/urchin.js.

Upvotes: 1

Related Questions