Magento Hosting

about the author

related articles

5 Responses to “Insecure or Non-secure Pages on the Magento Checkout”

1. Chris on January 28th, 2009

   Hi Sophie,
   Thank you for your articles. I have a situation involving secure one-page checkout and I’m hoping that you can provide some helpful advice.

   I run multiple stores off of a single Magento install. These stores all have separate domain names. I’m using a shared hosting plan (a pretty good one) that accommodates my setup but limits me to only being able to install one SSL. Because of this I have each domains SSL path in Magento’s configuration pointing to the one domain that has SSL. This results in having a central shopping cart for every domain. That’s great except that the user sees the site change when going to checkout. It no longer is the same template.

   I see that the sites from Bright Light Media all work properly with SSL and was wondering if my problem is my configuration settings or if maybe I need a different host or what? I appreciate any help that you can offer.

   Thanks again,
   Chris

2. Sam Davis on January 29th, 2009

   Hi, looks like Sophie hasn’t had chance to read your comment yet Chris, but maybe I can help.

   It would be interesting to see what kind of set up you have. Bright Light Media have separate domains for their Magento websites, running off the single installation.

   Each domain, in the Control panel, have got SSL certificates, and also they are set in Control Panel to have “Use a single directory for housing SSL and non-SSL content” enabled.

   I suspect in Magento’s Adfmin is where the problems are lying: So in System > Configuration > choose Web Site from Drop Down > Web Tab you should see the Unsecure boxes as follows:

   Base URL – http://www.your-individual-website.com
   Base Link URL – {{unsecure_base_url}}
   Base Skin URL – http://www.where-magento-is-installed.com/skin/
   Base Media URL - http://www.where-magento-is-installed.com/media/
   Base JavaScript URL – http://www.where-magento-is-installed.com/js/

   Secure fields should be filled the same as above with with the https://

   In the same breath, it is worth mentioning that for each website, on the Design tab, you should put the name of the theme folder that you want each website to reference.

   PS: It is also worth noting that you need to have the domain which houses the Magento installation accessible from other domains on your server. You will need your “open_basedir” set to None.

   If you need any further help, drop me an email via the Contact Form at the bottom of the page.

3. sriram on January 19th, 2010

   Hi Sophie Keenan,
   Thanks a lot for your post. I had a similar issue in my one page checkout and finally I found that there was webtracking script pointing only to http which was showing my page as partially secured. when I removed the tracking code, the page started loading fully secured.

   Thanks again for your post,
   Sriram

4. Darren Fauth on March 25th, 2011

   I am at the point of development on our new site where I installed the SSL on the server and needed to change the config of Magento 1.4 to use https in the checkout. I was getting the ’secure and not-secure content’ warning from Internet Explorer and started looking around for the solution. I knew it was from scripts, css or css images..but being new to Magento was not sure what was handled by the config and what I needed to tweak in my custom them and custom .phtml files.

   Then I found your post and changed the url reference for my css background images to simply ‘//’ (something I had never ever heard of in many years of development). Upload the css file and that fixed it all! Happy, happy I found your post.

   Thanks!

5. Alen on September 8th, 2011

   Hi have the same problem we are losing customers for that issue I am new to Magento and like to get some information in detail on how to fix this
   thanks

Leave a Reply