Solved

SSL: Displaying Both Secured and Non secured items on the page.. AHHH! Pls help!!

Posted on 2006-12-01
5
196 Views
Last Modified: 2010-03-04
Everytime I go into a secured section of my website, it gives me this popup that if I want to display nonsecure and secure items on the page. If I press yes, it shows everything fine, but there's no lock since not everything is secured. If I press no then it doesn't display all my images. Is there somethinhg I can do in Apache to script or rewrite all links with https when in ssl mode? I find it unpractical to put https on everything and have a separate set of pages for nonsecure. Pls help with any advise or experience. Thanks in advance for all the help.
0
Comment
Question by:bemara57
  • 2
5 Comments
 
LVL 43

Expert Comment

by:ravenpl
ID: 18059424
So far I know You will not solve it with apache itself. You could try rewriting based on REFERER, but I guess it's easier to fix the webpage itself.
Intead of absolute links like
<IMG SRC="http://server.name/img/img1.jpg"> use relative ones
<IMG SRC="/img/img1.jpg"> the browser will try load such link with same protocol as main html document.
0
 
LVL 43

Accepted Solution

by:
ravenpl earned 250 total points
ID: 18059438
On second thought You can't do with apache, consider You have SSL document which have link to image starting with http://
Even if You can catch such situation on server (referer was https:// and fetching img is http://), the browser will send http:// request first anyway - right? And therefore will complain anyway.
0
 
LVL 57

Assisted Solution

by:giltjr
giltjr earned 250 total points
ID: 18064412
Not a whole lot you can do.  If all source files are you your sever, then ravenpl is correct in the first post.

If you are refering to a site that is on a different sever, that you control, then that sever must also be setup for SSL and  then you could use https for SSL connections and http for non-SSL, you would need to use dynamic HTML to specify http or https.

If you are refering to a site that is not under you control and it is only non-SSL, then you are out of luck.


0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Introduction As you’re probably aware the HTTP protocol offers basic / weak authentication, which in combination with the relevant configuration on your web server, provides the ability to password protect all or part of your host.  If you were not…
In Solr 4.0 it is possible to atomically (or partially) update individual fields in a document. This article will show the operations possible for atomic updating as well as setting up your Solr instance to be able to perform the actions. One major …
I designed this idea while studying technology in the classroom.  This is a semester long project.  Students are asked to take photographs on a specific topic which they find meaningful, it can be a place or situation such as travel or homelessness.…
Need to grow your business through quality cloud solutions? With everything required to build a cloud platform and solution, you may feel like the distance between you and the cloud is quite long. Help is here. Spend some time learning about the Con…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

17 Experts available now in Live!

Get 1:1 Help Now