Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people, just like you, are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
Solved

SSL: Displaying Both Secured and Non secured items on the page.. AHHH! Pls help!!

Posted on 2006-12-01
5
198 Views
Last Modified: 2010-03-04
Everytime I go into a secured section of my website, it gives me this popup that if I want to display nonsecure and secure items on the page. If I press yes, it shows everything fine, but there's no lock since not everything is secured. If I press no then it doesn't display all my images. Is there somethinhg I can do in Apache to script or rewrite all links with https when in ssl mode? I find it unpractical to put https on everything and have a separate set of pages for nonsecure. Pls help with any advise or experience. Thanks in advance for all the help.
0
Comment
Question by:bemara57
  • 2
5 Comments
 
LVL 43

Expert Comment

by:ravenpl
ID: 18059424
So far I know You will not solve it with apache itself. You could try rewriting based on REFERER, but I guess it's easier to fix the webpage itself.
Intead of absolute links like
<IMG SRC="http://server.name/img/img1.jpg"> use relative ones
<IMG SRC="/img/img1.jpg"> the browser will try load such link with same protocol as main html document.
0
 
LVL 43

Accepted Solution

by:
ravenpl earned 250 total points
ID: 18059438
On second thought You can't do with apache, consider You have SSL document which have link to image starting with http://
Even if You can catch such situation on server (referer was https:// and fetching img is http://), the browser will send http:// request first anyway - right? And therefore will complain anyway.
0
 
LVL 57

Assisted Solution

by:giltjr
giltjr earned 250 total points
ID: 18064412
Not a whole lot you can do.  If all source files are you your sever, then ravenpl is correct in the first post.

If you are refering to a site that is on a different sever, that you control, then that sever must also be setup for SSL and  then you could use https for SSL connections and http for non-SSL, you would need to use dynamic HTML to specify http or https.

If you are refering to a site that is not under you control and it is only non-SSL, then you are out of luck.


0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

If you are running a LAMP infrastructure, this little code snippet is very helpful if you are serving lots of HTML, JavaScript and CSS-related information. The mod_deflate module, which is part of the Apache 2.2 application, provides the DEFLATE…
If you've heard about htaccess and it sounds like it does what you want, but you're not sure how it works... well, you're in the right place. Read on. Some Basics #1. It's a file and its filename is .htaccess (yes, with a dot in the front). #…
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below. https://filedb.experts-exchange.com/incoming/2017/03_w12/1151775/Permutations.txt https://filedb.experts-exchange.com/incoming/201…

860 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question