Forums

How to resolve HTTPS mixed content security warning

taung 27 Dec, 2011
Hello,

I need to use a form in SSL secured mode.

When I load the form up using https, i get security warning of mixed content.

When I look at the page source, I see some CSS files being loaded using http.

How can I make the form completely SSL secured?

For example, you can see the form below.
https://dermbiz.com/request-invite/ssl_form_test.html?template=DS_custom01

I am loading a custom template because I need to hide the Joomla header and footer.

Please help.
taung 28 Dec, 2011
Hello,

Okay, I think I may have identified the issue. So combing over the page source codes, I found that Chrono form is loading the CSS files using HTTP url path. Which is probably why I am getting mixed content security issue.

So I found that under Chronocontact component folder, and in the chronocontact.html.php is the php codes for loading the CSS files.

Here they load the base site's URL with this code
$CF_PATH = ($mainframe->isSite()) ? JURI::Base() : $mainframe->getSiteURL();


which then used to load the CSS files.
<link rel="stylesheet" href="<?php echo $CF_PATH; ?>components/com_chronocontact/css/calendar2.css" type="text/css" />
            <link href="<?php echo $CF_PATH.'components/com_chronocontact/css/'; ?>tooltip.css" rel="stylesheet" type="text/css" />
            <script type="text/javascript" src="<?php echo $CF_PATH; ?>components/com_chronocontact/js/calendar2.js"></script>
            <script src="<?php echo $CF_PATH.'components/com_chronocontact/js/'; ?>livevalidation_standalone.js" type="text/javascript"></script>
            <link href="<?php echo $CF_PATH.'components/com_chronocontact/css/'; ?>consolidated_common.css" rel="stylesheet" type="text/css" />
			<script src="<?php echo $CF_PATH.'components/com_chronocontact/js/'; ?>customclasses.js" type="text/javascript"></script>


Somehow the URL loaded is http base url and not the https version.

Any idea on how I can fix this so that this variable load the proper HTTP or HTTPS url depending on how I load up the form?
GreyHead 28 Dec, 2011
Hi taung,

Max has made some changes to the URL handling in CFv4 RC3.0 released a couple of days ago. Please upgrade to check if this fixes this problem.

Bob
GreyHead 29 Dec, 2011
Hi tuang,

The files all look OK on your form now, have you changed something?

If you are using CFv4 please upgrade to RC3.0 as there are some URL changes in the new release.

Bob
This topic is locked and no more replies can be posted.