System Links don't use https (SSL issue)

ThemeBurn SupportForumsOpenCart ThemesPavilion OpenCart ThemeSystem Links don't use https (SSL issue)

This topic has been marked as resolved.

Hej TB-Support,

I upgraded both OpenCart and Pavilion to the newest versions in order for the SSL issues to be fixed. However, I still have some problems with it:

a) Even though images and most other resources are now loaded via https most internal links (navigation, links from category -> product, …) go to the unsecure site first and only work since I have a redirect in htaccess forwarding all non-secure pages to the secure version. However, I’d like to get rid of this redirect and have my internal links correct right away. Any idea how this could be solved?

b) On the basket page there still seem to be some unsecure ressources.

My site and login information are the same as stated here:
http://support.themeburn.com/topic/problems-after-updating-to-v-1-2-2

Would be great if you could help as SSL was the main reason for upgrading which has already be time-consuming.

Thanks & best,
Torge

December 24, 2014 at 11:01 am #36026

Hi!

a) – this is default OpenCart behavior. In order to change it, you have to modify a core OpenCart file. Open system/librar/url.php and change

$secure = false

to

$secure = true

b) Could you point us to the unsecured resources because we are not able to spot any.

BR,
ThemeBurn team

December 29, 2014 at 5:57 pm #36145

Hej TB support,

thanks for getting back to me!

a) –> wow, this solved the problem. One would think that this should be switched to true once you set SSL to “on” in the backend of OpenCart. Is there any reason why this is not the case? Anything speaking against this being true? For me everything seems to work great now.

b) –> after using your solution for a) the problem doesn’t occur anymore.

Thanks very much & best,
Torge

December 30, 2014 at 10:17 pm #36159

a) Because there is not much sense in securing public pages, where no sensitive information is provided (categories, products etc.). Only private information (login details, cart, checkout) can be compromised.

b) This problem should not occur even without this custom solution. If you could provide link to the unsecure resources on the basket page, we would be grateful.

Best,
ThemeBurn team

December 31, 2014 at 10:58 am #36161

a) secure sites will give you better ranking (http://searchengineland.com/google-starts-giving-ranking-boost-secure-httpsssl-sites-199446) and probably a bit more credibility. I still think it’s weird OC wouldn’t automatically set all links to https. Maybe it’s an idea for your theme.

b) I’m so sorry, but I couldn’t find it anymore. I tried to reproduce this on my dev but couldn’t. I think it was the favicon, site logo and/or some js (probably: theme/pavilion/javascript/jquery-migrate-1.2.1.min.js)

January 2, 2015 at 6:44 am #36206

Thanks!

We will indeed consider this as a future theme feature.

I mark this topic as resolved. If you have further questions, which are not related to the current thread, please post a new topic.

BR,
ThemeBurn team

January 6, 2015 at 4:06 pm #36366
Viewing 6 posts - 1 through 6 (of 6 total)
  • You must be logged in to reply to this topic.