Publishing images over https/ssl
Autor: Christopher S.I recently purchased a SSL certificate through my web host and they verified it is installed on the server but I continue to see a message stating my site is unsecure.
They said "The site is secured. I did an SSL check on the domain it it passed with a "A" rating.
The reason it says its unsecured is because you are including unsecured content. you cannot use images over http:// on a webpage being served over https://
To combat this, one way is to remove the http(s) all together on links.
An example of this is to use //mysite.com/images/logo/logo.png rather than http://mysite.com/images/logo/logo.png." when I asked about the unsecure notifications I get when I check the site online.
How do I make the changes he is suggesting in Evolution 12 so it all shows secure with https address?
Thanks!
That's correct. Once you have a SSL certificate and wish to use the HTTPS all links must be secure as well.<!--?xml:namespace prefix = "o" ns = "urn:schemas-microsoft-com:office:office" ?-->
If you have your pages on HTTPS://www.mysite.com and you have your logo on that same site, you would link to /images/logo/logo.png. This way it will append the correct protocol.
If you have your logo on another site, it must also have a SSL certificate else you will get the error.
Also, I believe that if you use the https:// in WebSite Address(URL) in STEP 1 WSX5 should use the correct protocol when it generates the code.
In the .htaccess file you will need a permanent redirect to the certified domain (with or without www.), As in the certification.
In addition, you need to redirect to https when called with http.
example:
__________________________________________________
RewriteEngine On
RewriteCond% {HTTP_HOST}! ^ Www \ .domain \ .ext $ [NC]
RewriteRule ^ (. *) $ Http: //www.domain.ext/$1 [L, R = 301]
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond% {HTTPS} off
RewriteRule (. *) Https: //% {HTTP_HOST}% {REQUEST_URI} [R = 301, L]
</ IfModule>
____________________________________________________
domain and ext please replace and then upload the file ".htaccess"
I hope the presentation will be transferred correctly here for safety even in a text file Notes
Regards JJ.
Autor
Barry, I seem to be missing the "how" to link to said images in the /images/logo/logo.png. What I do is merely insert images where I want them pulling from my HD and let X5 do its thing, which apparently isn't working out for site security (https/ssl) purposes.
How do I reference the images in the manner you and the host describe?
I have changed the site address in step 1.
Autor
JJ, how do I access the .htaccess file in order to modify with the permanent redirect?
That is twice I have seen that suggestion, first time in a google search, but lack the understanding of how.
I appreciate you attaching the htaccess code.
The Annex htaccess.txt contains the original code for the file ".htaccess". You simply replace "domain and ext" with their data. We use this for the switch to https therefore views as domain.ext or http://domain.ext etc. are executed correctly. For example, in www.juag.com used.
JJ.
Autor
I wold like to have further clarification on the change from http:// to https:// in step one correcting for the images creating an issue with site security.
I am still seeing the same issue even with the change and so I am trying to sort out what is hanging up to https:// connection.
I have a support ticket in with my site host and am waiting for a response regarding the .htacess change.