Solved

SSL: Displaying Both Secured and Non secured items on the page.. AHHH! Pls help!!

Posted on 2006-12-01
5
199 Views
Last Modified: 2010-03-04
Everytime I go into a secured section of my website, it gives me this popup that if I want to display nonsecure and secure items on the page. If I press yes, it shows everything fine, but there's no lock since not everything is secured. If I press no then it doesn't display all my images. Is there somethinhg I can do in Apache to script or rewrite all links with https when in ssl mode? I find it unpractical to put https on everything and have a separate set of pages for nonsecure. Pls help with any advise or experience. Thanks in advance for all the help.
0
Comment
Question by:bemara57
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
5 Comments
 
LVL 43

Expert Comment

by:ravenpl
ID: 18059424
So far I know You will not solve it with apache itself. You could try rewriting based on REFERER, but I guess it's easier to fix the webpage itself.
Intead of absolute links like
<IMG SRC="http://server.name/img/img1.jpg"> use relative ones
<IMG SRC="/img/img1.jpg"> the browser will try load such link with same protocol as main html document.
0
 
LVL 43

Accepted Solution

by:
ravenpl earned 250 total points
ID: 18059438
On second thought You can't do with apache, consider You have SSL document which have link to image starting with http://
Even if You can catch such situation on server (referer was https:// and fetching img is http://), the browser will send http:// request first anyway - right? And therefore will complain anyway.
0
 
LVL 57

Assisted Solution

by:giltjr
giltjr earned 250 total points
ID: 18064412
Not a whole lot you can do.  If all source files are you your sever, then ravenpl is correct in the first post.

If you are refering to a site that is on a different sever, that you control, then that sever must also be setup for SSL and  then you could use https for SSL connections and http for non-SSL, you would need to use dynamic HTML to specify http or https.

If you are refering to a site that is not under you control and it is only non-SSL, then you are out of luck.


0

Featured Post

Visualize your virtual and backup environments

Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If your site has a few sections that need to be secure when data is transmitted between the server and local computer, such as a /order/ section for ordering or /customer/ which contains customer data, etc it would of course be recommended to secure…
In Solr 4.0 it is possible to atomically (or partially) update individual fields in a document. This article will show the operations possible for atomic updating as well as setting up your Solr instance to be able to perform the actions. One major …
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question