Solved

SSL: Displaying Both Secured and Non secured items on the page.. AHHH! Pls help!!

Posted on 2006-12-01
5
197 Views
Last Modified: 2010-03-04
Everytime I go into a secured section of my website, it gives me this popup that if I want to display nonsecure and secure items on the page. If I press yes, it shows everything fine, but there's no lock since not everything is secured. If I press no then it doesn't display all my images. Is there somethinhg I can do in Apache to script or rewrite all links with https when in ssl mode? I find it unpractical to put https on everything and have a separate set of pages for nonsecure. Pls help with any advise or experience. Thanks in advance for all the help.
0
Comment
Question by:bemara57
  • 2
5 Comments
 
LVL 43

Expert Comment

by:ravenpl
ID: 18059424
So far I know You will not solve it with apache itself. You could try rewriting based on REFERER, but I guess it's easier to fix the webpage itself.
Intead of absolute links like
<IMG SRC="http://server.name/img/img1.jpg"> use relative ones
<IMG SRC="/img/img1.jpg"> the browser will try load such link with same protocol as main html document.
0
 
LVL 43

Accepted Solution

by:
ravenpl earned 250 total points
ID: 18059438
On second thought You can't do with apache, consider You have SSL document which have link to image starting with http://
Even if You can catch such situation on server (referer was https:// and fetching img is http://), the browser will send http:// request first anyway - right? And therefore will complain anyway.
0
 
LVL 57

Assisted Solution

by:giltjr
giltjr earned 250 total points
ID: 18064412
Not a whole lot you can do.  If all source files are you your sever, then ravenpl is correct in the first post.

If you are refering to a site that is on a different sever, that you control, then that sever must also be setup for SSL and  then you could use https for SSL connections and http for non-SSL, you would need to use dynamic HTML to specify http or https.

If you are refering to a site that is not under you control and it is only non-SSL, then you are out of luck.


0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Hi, in this article I'm going to teach you how to run your own site, and how to let people in (without IP). I'll talk about and explain each step... :) By the way, everything in this Tutorial is completely free and legal. This article is for …
Introduction This article is intended for those who are new to PHP error handling (https://www.experts-exchange.com/articles/11769/And-by-the-way-I-am-New-to-PHP.html).  It addresses one of the most common problems that plague beginning PHP develop…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
With Secure Portal Encryption, the recipient is sent a link to their email address directing them to the email laundry delivery page. From there, the recipient will be required to enter a user name and password to enter the page. Once the recipient …

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question