Solved

Make character code secure

Posted on 2015-01-24
10
332 Views
Last Modified: 2015-01-27
We just noticed that the social icons are showing insecure when using https:
https://www.sempdx.org/amember/payment/authorize-aim/cc?id=457MR-40a7a8bf5a2bd140

You can see the icons on the top and bottom right are showing as just squares in firefox because they're insecure. You can see the difference by looking at any regular http page:
http://www.sempdx.org/

They're displayed by css using a character code:
.et-social-facebook a.icon:before { content: '\e093'; }
.et-social-twitter a.icon:before { content: '\e094'; }
.et-social-google-plus a.icon:before { content: '\e096'; }
.et-social-pinterest a.icon:before { content: '\e095'; }
.et-social-linkedin a.icon:before { content: '\e09d'; }
.et-social-tumblr a.icon:before { content: '\e097'; }
.et-social-instagram a.icon:before { content: '\e09a'; }
.et-social-skype a.icon:before { content: '\e0a2'; }
.et-social-flikr a.icon:before { content: '\e0a6'; }
.et-social-myspace a.icon:before { content: '\e0a1'; }
.et-social-dribbble a.icon:before { content: '\e09b'; }
.et-social-youtube a.icon:before { content: '\e0a3'; }
.et-social-vimeo a.icon:before { content: '\e09c'; }
.et-social-rss a.icon:before { content: '\e09e'; }

Open in new window


Is there a way to force them to be secure?
0
Comment
Question by:Dzynit
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 5
10 Comments
 
LVL 83

Accepted Solution

by:
Dave Baldwin earned 500 total points
ID: 40568366
Comes from this code.
@font-face {
font-family: 'ETmodules';
src:url('http://www.sempdx.org/wp-content/themes/Divi/fonts/ETmodules_v2.eot');
src:url('http://www.sempdx.org/wp-content/themes/Divi/fonts/ETmodules_v2.eot?#iefix') format('embedded-opentype'),
url('http://sempdx2014cache.s3.amazonaws.com/wp-content/themes/Divi/fonts/ETmodules_v2.ttf') format('truetype'),
url('http://www.sempdx.org/wp-content/themes/Divi/fonts/ETmodules_v2.woff') format('woff'),
url('http://www.sempdx.org/wp-content/themes/Divi/fonts/ETmodules_v2.svg#ETmodules') format('svg');
font-weight: normal;
font-style: normal;
}

Open in new window

Try getting rid of the 'http:' and start with the '//'.  Supposedly that makes the browser use the current method, either 'http' or 'https'.
0
 
LVL 14

Author Comment

by:Dzynit
ID: 40568381
I tried that and even tried using the full path with https, but still no luck.
0
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 40568507
That probably means that those aren't the only places or things that are not using 'https'.
0
How our DevOps Teams Maximize Uptime

Our Dev teams are like yours. They’re continually cranking out code for new features/bugs fixes, testing, deploying, responding to production monitoring events and more. It’s complex. So, we thought you’d like to see what’s working for us. Read the use case whitepaper.

 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 40568528
Like here:

<script src="http://code.jquery.com/jquery-1.9.1.js"></script>
<script src="http://code.jquery.com/ui/1.10.3/jquery-ui.js"></script>

There are also at least 3 <img> tags that are 'http' instead of 'https'.
0
 
LVL 14

Author Comment

by:Dzynit
ID: 40568550
I can deal with getting the other items taken care of, it's the social icons I really need help with. I guess I'll give it a try switching to fontawesome because I found a single forum post with a link to an https site and those icons work fine on it.

If that doesn't work, then we'll apparently have to do a screenshot and make actual images for the icons.
0
 
LVL 14

Author Comment

by:Dzynit
ID: 40572876
This turned out to be some incorrect custom code added in the theme's custom code editor. I was unaware that someone had added it and it was easily visible. After finally resorting to putting in a support ticket to the theme author, the person that added the wrong code remembered and let me know.

After that was fixed, I was able to turn on the https plugin that auto corrects any scripts and images in the pages. I just couldn't do that until the social icons would show.
0
 
LVL 14

Author Closing Comment

by:Dzynit
ID: 40572884
This was closest to where the problem was, but someone had copied this incorrectly in the custom editor and it wasn't easily found.
0
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 40573600
Glad you found and thanks for the points.
0
 
LVL 14

Author Comment

by:Dzynit
ID: 40573618
No problem Dave, I appreciated the help. Most of the time it turns out to be something so simple, yet overlooked because I'm always looking for the more complicated cause :)
0
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 40573647
I understand that.  I recently had on PHP page that wouldn't run, just put up a blank screen with no error messages, because I forgot to erase an extra ';' at the end of a line.  Took a while to find that one.
0

Featured Post

PeopleSoft Has Never Been Easier

PeopleSoft Adoption Made Smooth & Simple!

On-The-Job Training Is made Intuitive & Easy With WalkMe's On-Screen Guidance Tool.  Claim Your Free WalkMe Account Now

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
How to implement Read More and Read Less with dotdotdot? 4 40
toggle content 12 40
html5 1 45
regular gmail; not g-suite. one label. 11 50
Boost your ability to deliver ambitious and competitive web apps by choosing the right JavaScript framework to best suit your project’s needs.
Developer portfolios can be a bit of an enigma—how do you present yourself to employers without burying them in lines of code?  A modern portfolio is more than just work samples, it’s also a statement of how you work.
Any person in technology especially those working for big companies should at least know about the basics of web accessibility. Believe it or not there are even laws in place that require businesses to provide such means for the disabled and aging p…
The viewer will get a basic understanding of what section 508 compliance can entail, learn about skip navigation links, alt text, transcripts, and font size controls.

751 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question