SSL Security insecure content

  • Resolved curtisISS

    (@curtisiss)


    10 years, 5 months ago

    Hi,

    Getting SSL to work properly on my site is proving to be a major headache.

    Firstly, I’ve got a plugin called “WordPress HTTPS” going to force SSL on all pages, then I’ve got “SSL Insecure Content Fixer” and this: https://gist.github.com/webaware/4688802 that I have pasted into a text doc, saved it as a .php, dropped it in my plugins folder and activated it through the admin panel.

    With chrome, I’m still getting a shield that pops up on the right side of the address bar, if I hover over it or click it, it says “this page includes script from unauthenticated sources” and gives me the option to load them.

    I’ve run it through https://www.whynopadlock.com/ and it seems to think everything is good so I don’t know where to go from here…

Viewing 10 replies - 1 through 10 (of 10 total)

  • and I reckon you’re not going to get much help here either, if we don’t have a link to the site to look at… ??

    Thread Starter curtisISS

    (@curtisiss)

    haha, it’s internationalsalonsupplies.net.au ??

    I’ve just deleted WordPress HTTPS as it doesn’t seem to be doing anything now that I’ve installed SSL Insecure Content Fixer and Force SSL URL Scheme.

    G’day curtisISS,

    You can delete Force SSL URL Scheme too probably, because your website can detect SSL just fine (running the is_ssl-test.php script confirms that).

    Your final problem seems to be a Tumblr script, which is dynamically loaded by some plugin or your theme. Check what’s happening there. If you can disable the Tumblr thing you can confirm.

    cheers,
    Ross

    Thread Starter curtisISS

    (@curtisiss)

    Thanks for helping out Ross ??

    I’ve just deleted Force SSL URL Scheme.
    my website still forces SSL on all pages, is “SSL Insecure Content Fixer” doing this? Would it be wise to only force SSL on certain pages like the checkout to make the site load faster for my users?

    I’m using Church, which is a child theme of Omega.
    These are my activated plugins:
    Add Plain Text Email
    Bulk Photo to Product Importer Extension for WooCommerce (Free)
    Custom Facebook Feed
    Disable Comments
    Disable Theme Updates
    Display Widgets
    Event Calendar & Ticketing
    Google Analytics
    Limit Login Attempts
    MailPoet Newsletters
    Simple Woocommerce CSV Loader
    Smart Forms
    SSL Insecure Content Fixer
    WooCommerce
    WooCommerce Menu Cart
    WP Clean Up
    WP Fastest Cache
    WP Google Map Plugin

    Will I have to go through and disable each plugin one by one and refresh my site in another tab to check? How can I find out if it’s my theme?

    Thanks again ??
    -Curtis

    G’day Curtis,

    I imagine the Tumblr thing is in your theme — check for Social Media options in the theme settings. I can’t see anything in your plugins list that might be doing it.

    You might as well leave the site on HTTPS full time, it’ll save you some grief chasing down mixed content down the track. It’s probably forcing all pages to HTTPS because of your home an site URL settings in:

    Settings > General

    cheers,
    Ross

    Thread Starter curtisISS

    (@curtisiss)

    Hi Ross,

    Sorry to take so long to get back to you.

    I can’t really find any “theme settings”.
    I’ve looked in Appearance > Themes > My theme > customise and searched for “Tumblr” in the style.css and functions.php but beyond that I don’t know where to look or what I’m looking for…

    Thanks again,
    -Curtis

    Sounds like you need to hit your theme’s author for some support.

    cheers,
    Ross

    Thread Starter curtisISS

    (@curtisiss)

    Hi Ross,

    I posted on the Theme authors support forum and he came back with this:
    “church and omega themes don’t load Tumblr script. Please check your active plugins, or try to disable all plugins”

    Should I go ahead and troubleshoot by disabling all my plugins?

    Thanks
    -Curtis

    Do you mean to say, you haven’t already? Crikey, yes!

    cheers,
    Ross

    Thread Starter curtisISS

    (@curtisiss)

    Ahhhh, you seemed to think it was my Theme so I didn’t dig further with the plugins.

    But I’ve found the culprit!
    It was Bulk Photo to Product Importer Extension for WooCommerce (Free)!

    Thanks again Ross for all your help ??

    Topic Resolved
    -Curtis

Viewing 10 replies - 1 through 10 (of 10 total)
  • The topic ‘SSL Security insecure content’ is closed to new replies.

Tags