Keyword

Backend SSL issue...

  • Jake Knight
  • Jake Knight's Avatar Topic Author
  • Offline
  • New Member
More
12 years 4 months ago - 12 years 4 months ago #66145 by Jake Knight
Backend SSL issue... was created by Jake Knight
I have my site - www.colbsa.org, secured with an SSL cert.

The problem is that the K2 component loads the following in the head:
<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.7/jquery.min.js"></script>
  <script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jqueryui/1.8/jquery-ui.min.js"></script>

Is there a way to force this to pull from
https://aja....
???

My clients are getting a lot of error messages suggesting the site isn't secure.

I've done a number of searches on this and can't find a resolution. I also had the same problem with FPSS on the frontend and was able to override their php file.

Please Log in or Create an account to join the conversation.

More
12 years 4 months ago #66146 by Tyrone Jones
Replied by Tyrone Jones on topic Re: Backend SSL issue...
I am having the very same issue on every website and it never occur before. So I don't know if it was the update or some other cause in the universe but it doesn't sit well with clients.

I looked at source on every website with SSL and they had the same image I will post and hopefully someone can figure it out. I can't imagine disabling K2 and redesigns.

</style>
<script src="/media/system/js/mootools-core.js" type="text/javascript"></script>
<script src="/media/system/js/core.js" type="text/javascript"></script>
<script src="/media/system/js/mootools-more.js" type="text/javascript"></script>
<script src="/plugins/system/sl_floatingadmintoolbar/assets/js/floating_panel.js" type="text/javascript"></script>
<script src="ajax.googleapis.com/ajax/libs/jquery/1.7/jquery.min.js">
<script src="ajax.googleapis.com/ajax/libs/jqueryui/1.8/jquery-ui.min.js">
<script src="/media/k2/assets/js/k2.js?v=2.5.7" type="text/javascript"></script>
<script src="/media/system/js/modal.js" type="text/javascript"></script>
<script src="/plugins/system/nnframework/js/script.js?v=12.5.4" type="text/javascript"></script>
<script src="/administrator/modules/mod_cachecleaner/cachecleaner/js/script.js?v=2.1.0p" type="text/javascript"></script>
<script src="/administrator/modules/mod_betterpreview/betterpreview/js/ZeroClipboard.js" type="text/javascript"></script>
<script type="text/javascript">


<!--[if lt IE 7]>
<div style="border:1px solid #F7941D;background:#FEEFDA;text-align:center;clear:both;height:75px;position:relative;margin-bottom:16px;">
<div style="position:absolute;right:3px;top:3px;font-family:courier new;font-weight:bold;">
<a href="#" onclick="javascript:this.parentNode.parentNode.style.display='none';return false;"><img src="/content/media/k2/assets/images/ie6nomore/ie6nomore-cornerx.jpg" style="border:none;" alt="Close this notice"/></a>
</div>
<div style="width:640px;margin:0 auto;text-align:left;padding:0;overflow:hidden;color:black;">
<div style="width:75px;float:left;">
<img src="/content/media/k2/assets/images/ie6nomore/ie6nomore-warning.jpg" alt="Warning!"/>
</div>
<div style="width:275px;float:left;font-family:Arial,sans-serif;">
<div style="font-size:14px;font-weight:bold;margin-top:12px;">
You are using an outdated browser </div>
<div style="font-size:12px;margin-top:6px;line-height:12px;">
For a better experience using this site, please upgrade to a modern web browser. </div>
</div>
<div style="width:75px;float:left;"><a href="www.firefox.com" target="_blank">Get Firefox 3.5

<div style="width:75px;float:left;"><a href="www.browserforthebetter.com/download.html" target="_blank">Get Internet Explorer 8

<div style="width:73px;float:left;"><a href="www.apple.com/safari/download/" target="_blank">Get Safari 4

<div style="float:left;"><a href="www.google.com/chrome" target="_blank">Get Google Chrome

</div>
</div>
<![endif]-->

Please Log in or Create an account to join the conversation.

More
12 years 1 week ago #66147 by Tyrone Jones
Replied by Tyrone Jones on topic Re: Backend SSL issue...
After months of trying to figure this out I found a solution. Some people may need to adjust this for their server.

If your site is using ssl, any time you load a resource from a third
party server (in this case, Google), you will want to use https:// in the
URL. If they don't offer it, you'd really need to avoid using it
altogether. Fortunately, Google does offer secure versions of their
scripts, so you can definitely just change the URL in the code to https.

From your shell, you can run a command like the following in your site's
web directory to get a list of all files using 'ajax.googleapis.com'

grep -R ajax.googleapis.com .

That will go through every directory and check your code for
ajax.googleapis.com. Then, you can modify each of those files to just
replace the "http" line of code with "https".

You may also want to make sure the option within your Joomla admin to
always use ssl is selected as well.

Please Log in or Create an account to join the conversation.