-
☆ A M B ☆
- 1,231 Posts
Hello, I have a site that is using an SSL cert and I just can’t seem to get it working with REV correctly. When the page loads in FF, the SSL blue tab appears beside the domain name and then quickly disappears. How ever it stays in the manager apart from when I go to the home tab, I’m guessing it’s cause of the http: links to the feeds.
The only mention of http on the page is
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<title>mysite</title>
<meta http-equiv="Content-Type" content="text/html;charset=utf-8" />
<meta http-equiv="content-language" content="en-uk" />
I have set the server type to https in the settings, set the htaccess but it’s still disappearing just before the page finishes rendering. What could be causing that?
If it’s disappearing it normally means there’s a http:// hard coded in the code somewhere that causes it to fail, could also be links in javascript, css etc. Depending on how you have built the site start removing chunks ( IE: header, Footer etc ) and refresh the page each time, if you haven’t built it in chunks just remove bit’s at a time, that will help you cut down where is causing the problem but without seeing the code actually generated it’s impossible to say what would be causing it.
I install a few of these a day on shops that we build and host and know it can be a nightmare to tract down the bit of code that’s braking it and that’s the best way Ive come across.
Also note it is better to use site_url ( or whatever the code is ) in all paths as links back to pages that don’t render securly can also break the page your on.
-
☆ A M B ☆
- 1,231 Posts
I’m using typekit (custom fonts) and noticed that it loads a CSS file on the fly but from http. That’s what causing it! Really the only reason the SSL is on the site is for sending a form, the client wanted a secure cert for the form only. I will be creating a custom ajax form, I wonder if encrypting the document that will hold the ajax action with the SSL will be enough to ensure security or does the actual page with the form need to use the SSL as well?
If you don’t need it on the site other than the form can you not pass the data to another page with something like a 4 second loading gif which has the ssl on it, then pass it to the php that processes the form and sends you back to the thank you page ??
Either that or just loose the font on the form page or include the form via a Iframe ( not sure it that will work though ) ??
-
☆ A M B ☆
- 1,231 Posts
My idea was to have an http page as normal with the form on it, create another document in modx that holds the snippet that will process the ajax/json but have this page using the ssl (https). I wonder if this is enough to keep the data safe since it’s the document with the ajax actions/response that will be encrypted. Just have the form to send to https obviously. Not sure if this will still utilise the SSL though? I don’t want to drop the custom fonts, I just paid for a years service lol. They do over SSL serving as well but that’s not something I’m going to pay for just now.
To be honest I dont think a page without the ssl will pass the data correctly, IE: it wont pass secure data to a https page, it’s the https page that passes the secure data and im not sure if there is a work around for it as they offer the secure option at a extra cost.
Sorry I couldn’t be more help
-
☆ A M B ☆
- 1,231 Posts
I am having some issues with the SSL cert giving warnings about the wrong url being accessed. The SSL is correct and I have tried the htaccess option that is in the default file with rev and it does solve the issue. The only thing is I only require 1 page to use the SSL and I do not want it active on other pages but changing the SSL redirect in the htaccess is making every page land on an SSL page. How can I edit the htaccess to only this on a certain page?
Thanks.
