https with javascript and image problem.
 

Hello guys, really need help on this problem here, as I'm still very fresh out of womb when it comes to internet security. I modified some part of my cart_totals.tpl, and alert pop-ups started appearing with "....site contains both secure and insecure content...."

What did I do wrong here? my https directory have symbolic link to the xcart directory...

[code]{* $Id: cart_totals.tpl,v 1.24.2.3 2003/02/03 14:21:22 svowl Exp $ *}
{literal}
<script language="JavaScript" type="text/JavaScript">
<!-- function MM_openBrWindow(theURL,winName,features)
{window.open(theURL,winName,features);} --> </script>
{/literal}
<table cellpadding=0 cellspacing=0 width=100%><tr><td>
</td><td align=right>
{if $shipping ne "" and $need_shipping}
<font class=FormButton>{$lng.lbl_delivery}: </font>
<select name=shippingid onchange="document.cartform.submit()">
{section name=ship_num loop=$shipping}
<option value="{$shipping[ship_num].shippingid}" {if $shipping[ship_num].shippingid eq $cart.shippingid}selected{/if}>{$shipping[ship_num].shipping|escape}</option>
{/section}
</select>


{else}
<input type=hidden name=shippingid value=0>
{/if}
</td></tr></table>
<div align=right>
<font class=FormButton>{$lng.lbl_subtotal}:</font> <font class=ProductPriceSmall>{include file="currency.tpl" value=$cart.sub_total}</font>{include file="customer/main/alter_currency_value.tpl" alter_currency_value=$cart.sub_total}

{if $config.General.use_vat eq "Y"}<font class=FormButton>{$lng.lbl_including_vat_cart_tota l}: </font><font class=ProductPriceSmall>{include file="currency.tpl" value=$cart.total_vat}</font>{include file="customer/main/alter_currency_value.tpl" alter_currency_value=$cart.total_vat}
{/if}

.....
###nothing is changed, cutting short the code
.....

<input type=hidden name=paymentid value={$smarty.get.paymentid}>
<input type=hidden name=mode value={$smarty.get.mode}>
<input type=hidden name=action value=update>
</div>[code]

BTW should I be using built in javascript function for popup windows? I don't really know how to use the x-cart ones though =(

Thanks for any insights![/code]

Easiest way to find the problem is view the source on the page you receive the problem and do a search for 'http' and see if any references to images,javascripts,etc. are being pulled from http vs https.

hth. ;)

:!:
Thanks Boomer, the culprit is a white space <img src> linking to HitsLink...
I should have used search... :oops: