Solved

SSL: Displaying Both Secured and Non secured items on the page.. AHHH! Pls help!!

Posted on 2006-12-01
5
200 Views
Last Modified: 2010-03-04
Everytime I go into a secured section of my website, it gives me this popup that if I want to display nonsecure and secure items on the page. If I press yes, it shows everything fine, but there's no lock since not everything is secured. If I press no then it doesn't display all my images. Is there somethinhg I can do in Apache to script or rewrite all links with https when in ssl mode? I find it unpractical to put https on everything and have a separate set of pages for nonsecure. Pls help with any advise or experience. Thanks in advance for all the help.
0
Comment
Question by:bemara57
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
5 Comments
 
LVL 43

Expert Comment

by:ravenpl
ID: 18059424
So far I know You will not solve it with apache itself. You could try rewriting based on REFERER, but I guess it's easier to fix the webpage itself.
Intead of absolute links like
<IMG SRC="http://server.name/img/img1.jpg"> use relative ones
<IMG SRC="/img/img1.jpg"> the browser will try load such link with same protocol as main html document.
0
 
LVL 43

Accepted Solution

by:
ravenpl earned 250 total points
ID: 18059438
On second thought You can't do with apache, consider You have SSL document which have link to image starting with http://
Even if You can catch such situation on server (referer was https:// and fetching img is http://), the browser will send http:// request first anyway - right? And therefore will complain anyway.
0
 
LVL 57

Assisted Solution

by:giltjr
giltjr earned 250 total points
ID: 18064412
Not a whole lot you can do.  If all source files are you your sever, then ravenpl is correct in the first post.

If you are refering to a site that is on a different sever, that you control, then that sever must also be setup for SSL and  then you could use https for SSL connections and http for non-SSL, you would need to use dynamic HTML to specify http or https.

If you are refering to a site that is not under you control and it is only non-SSL, then you are out of luck.


0

Featured Post

Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In my time as an SEO for the last 2 years and in the questions I have assisted with on here I have always seen the need to redirect from non-www urls to their www versions. For instance redirecting http://domain.com (http://domain.com) to http…
It is possible to boost certain documents at query time in Solr. Query time boosting can be a powerful resource for finding the most relevant and "best" content. Of course the more information you index, the more fields you will be able to use for y…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…
Do you want to know how to make a graph with Microsoft Access? First, create a query with the data for the chart. Then make a blank form and add a chart control. This video also shows how to change what data is displayed on the graph as well as form…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question