Getting "Security Alert" in IE6 when going to my site...

Lou Gonzalez

Hi Folks. I searched the forum but didn't find any mention of this so hopefully someone can help. I'm using IE6 and when I go to my business site : https://www.steadfastdesigns.smugmug.com/ I get a "Security Alert" window.

Here's a screen capture of it : http://naynlou.smugmug.com/photos/47326519-M-1.jpg

Then I get another windows (which pops up twice) telling me "This page contains both secure and nonsecure items. Do you want to display the non-scure items?"

I was sure it was my browser settings but now I'm not so sure now. I set everything to default and still get them. When I visit other smugmug sites, I never see these security alerts, but for mine it does. My wife gets it at work, but we don't get it from our home PC. My co-workers don't get but I do from my workstation (and we're on the same network). And they're running the exact same version of IE as me with the same browser settings.

I'm baffled. Anyone experience this? Can anyone make any suggestions? I'm afraid my customers will run into this and be scared away by the "Security Alert". :dunno

Thanks.

flyingdutchie

Lou Gonzalez wrote:

Hi Folks. I searched the forum but didn't find any mention of this so hopefully someone can help. I'm using IE6 and when I go to my business site : https://www.steadfastdesigns.smugmug.com/ I get a "Security Alert" window. Here's a screen capture of it : http://naynlou.smugmug.com/photos/47326519-M-1.jpg Then I get another windows (which pops up twice) telling me "This page contains both secure and nonsecure items. Do you want to display the non-scure items?" I was sure it was my browser settings but now I'm not so sure now. I set everything to default and still get them. When I visit other smugmug sites, I never see these security alerts, but for mine it does. My wife gets it at work, but we don't get it from our home PC. My co-workers don't get but I do from my workstation (and we're on the same network). And they're running the exact same version of IE as me with the same browser settings. I'm baffled. Anyone experience this? Can anyone make any suggestions? I'm afraid my customers will run into this and be scared away by the "Security Alert". Thanks.

You go to this URL
https/www.steadfastdesigns.smugmug.com/

This URL starts with https and not with http
Go to this url instead:
http://www.steadfastdesigns.smugmug.com/

update: This is why you get these messages:
When you go to https/blahblah/ you go to a secure site. So far, no problem. But on your www.steadfastdesigns.smugmug.com you may have links (either direct clickable links or links to images) that are not going to a secure site. I.e. they start with http/blahblah/. That means you have non-secure items (images, links, javascript) on a secure (main-)page. This can be problem for security reasons. That's why you get the message. Removing the s from https will cause the main-page to not be secure and the security alerts will no longer show.

Andy

Lou Gonzalez wrote:

Hi Folks. I searched the forum but didn't find any mention of this so hopefully someone can help. I'm using IE6 and when I go to my business site : https://www.steadfastdesigns.smugmug.com/ I get a "Security Alert" window.

Here's a screen capture of it : http://naynlou.smugmug.com/photos/47326519-M-1.jpg

Then I get another windows (which pops up twice) telling me "This page contains both secure and nonsecure items. Do you want to display the non-scure items?"

I was sure it was my browser settings but now I'm not so sure now. I set everything to default and still get them. When I visit other smugmug sites, I never see these security alerts, but for mine it does. My wife gets it at work, but we don't get it from our home PC. My co-workers don't get but I do from my workstation (and we're on the same network). And they're running the exact same version of IE as me with the same browser settings.

I'm baffled. Anyone experience this? Can anyone make any suggestions? I'm afraid my customers will run into this and be scared away by the "Security Alert".

Thanks.

Lou,

When you direct visitors and customers to your site, *do not* use the "s" in https

your links given out should look like this:

http://www.steadfastdesigns.smugmug.com/

and this

http://steadfastdesigns.smugmug.com/gallery/1012909



all the best,

Lou Gonzalez

Excellent! Thanks!

Andy wrote:

Lou,

When you direct visitors and customers to your site, *do not* use the "s" in https

your links given out should look like this:

http://www.steadfastdesigns.smugmug.com/

and this

http://steadfastdesigns.smugmug.com/gallery/1012909



all the best,

I'm just glad it was something easy! Thanks again folks.

jfriend

No https for your sub-domain?

Lou Gonzalez wrote:

Hi Folks. I searched the forum but didn't find any mention of this so hopefully someone can help. I'm using IE6 and when I go to my business site : https://www.steadfastdesigns.smugmug.com/ I get a "Security Alert" window.

Here's a screen capture of it : http://naynlou.smugmug.com/photos/47326519-M-1.jpg

Then I get another windows (which pops up twice) telling me "This page contains both secure and nonsecure items. Do you want to display the non-scure items?"

I was sure it was my browser settings but now I'm not so sure now. I set everything to default and still get them. When I visit other smugmug sites, I never see these security alerts, but for mine it does. My wife gets it at work, but we don't get it from our home PC. My co-workers don't get but I do from my workstation (and we're on the same network). And they're running the exact same version of IE as me with the same browser settings.

I'm baffled. Anyone experience this? Can anyone make any suggestions? I'm afraid my customers will run into this and be scared away by the "Security Alert".

Thanks.

Presumably, this is occurring because you are accessing this site via https and smugmug does not acquire and serve up SSL certificates for every sub-domain that they host. Instead, they are likely serving up their own SSL certificate, not one for your sub-domain.

This is likely one of the reasons why the shopping cart (which is served up with https) is not co-branded and doesn't show your sub-domain.

My question to you is "why are you accessing your regular images via "https" instead of http? I doubt smugmug intends to support general purpose access via https without security warnings.

rallymaniac

just ditch the IE,
That's one of the worst browsers out there :

flyingdutchie

rallymaniac wrote:

just ditch the IE,
That's one of the worst browsers out there :

I would say: DO NOT ditch IE.
If you ditch IE, you will make your site inaccessible for about (at least) 75% of your possible viewers.

And who cares. IE is just software. FireFox is too. They all have their quirks and problems.

rallymaniac

flyingdutchie wrote:

I would say: DO NOT ditch IE.
If you ditch IE, you will make your site inaccessible for about (at least) 75% of your possible viewers.

And who cares. IE is just software. FireFox is too. They all have their quirks and problems.

i admitt that some whacky sites don't show the full content but that's only like 1% of them and i'm willing to do the trade off for spam/popup/virus free web browsing. I've been officially IE free for almost 2 years and i wouldn't go back ever

jfriend

You are missing the point

rallymaniac wrote:

i admitt that some whacky sites don't show the full content but that's only like 1% of them and i'm willing to do the trade off for spam/popup/virus free web browsing. I've been officially IE free for almost 2 years and i wouldn't go back ever

You are missing the point of flyingdutchie's message. If you are preparing a web site for others to view and you want everyone to be able to view it, then you have to prepare a web-site that will work for IE even if you personally dislike it and don't use it yourself and consider it broken. If you don't care whether IE users can view your web-site, then you can completely ignore it.

If you do care that they can view your web-site, you cannot ignore it. You don't have to use it for your own browsing, but you do have to use it to test out customizations you make to your site.

Mike Lane

Develop your site in firefox and then hack it for IE. Anyone who creates a website (including all of us smugmuggers) and doesn't include IE in their testing is turning away business. I don't know about anyone else, but turning away business seems like a bad idea to me.

ZsaZsa

That pesky secure/nonsecure message & security alert window
Hello, all!

I'm new around here and I've been reading everything I can on Digital Grin. You guys are terrific! I'm learning a lot.

And now I've got a question: All is fine on my site until I want to go from the shopping cart back to continue browsing. Then I get that pesky "This page contains both secure and nonsecure items. Do you want to display the non-secure items?" message. And I get the "Security Certificate" alert window, too.

I use both IE6 and Firefox. And, well, IE is the goofy one. It seems that wehn I hit the "continue browsing" button I go back to the site but it's the https version instead of the http one. I've emptied the cache -- at least I think I have -- several times.

So there you have it. What to do, what to do.

Oh, my site's at http://www.susanstayer.smugmug.com/.

Andy

ZsaZsa wrote:

Hello, all!

I'm new around here and I've been reading everything I can on Digital Grin. You guys are terrific! I'm learning a lot.

And now I've got a question: All is fine on my site until I want to go from the shopping cart back to continue browsing. Then I get that pesky "This page contains both secure and nonsecure items. Do you want to display the non-secure items?" message. And I get the "Security Certificate" alert window, too.

I use both IE6 and Firefox. And, well, IE is the goofy one. It seems that wehn I hit the "continue browsing" button I go back to the site but it's the https version instead of the http one. I've emptied the cache -- at least I think I have -- several times.

So there you have it. What to do, what to do.

Oh, my site's at http://www.susanstayer.smugmug.com/.

Thanks - we're looking into it.

Ben

ZsaZsa wrote:

Hello, all!

I'm new around here and I've been reading everything I can on Digital Grin. You guys are terrific! I'm learning a lot.

And now I've got a question: All is fine on my site until I want to go from the shopping cart back to continue browsing. Then I get that pesky "This page contains both secure and nonsecure items. Do you want to display the non-secure items?" message. And I get the "Security Certificate" alert window, too.

I use both IE6 and Firefox. And, well, IE is the goofy one. It seems that wehn I hit the "continue browsing" button I go back to the site but it's the https version instead of the http one. I've emptied the cache -- at least I think I have -- several times.

So there you have it. What to do, what to do.

Oh, my site's at http://www.susanstayer.smugmug.com/.

Hmmm, I am not able to reproduce this at all. I went to your site (linked above) in IE6 and clicked on your featured gallery. I added the first picture to my cart (single add), and then hit "continue browsing". I (correctly) got the message saying I was leaving a secure page (I was), and ended up on the non-https version of your gallery.

Can you see if any of those steps differ from what you are doing? Thanks!

bwg

Ben wrote:

Hmmm, I am not able to reproduce this at all. I went to your site (linked above) in IE6 and clicked on your featured gallery. I added the first picture to my cart (single add), and then hit "continue browsing". I (correctly) got the message saying I was leaving a secure page (I was), and ended up on the non-https version of your gallery.

Can you see if any of those steps differ from what you are doing? Thanks!

it only redirects to the secure version if you are viewing an empty cart and hit the continue browsing button...i had previously reported this: http://dgrin.com/showthread.php?p=296149#post296149

Ben

bigwebguy wrote:

it only redirects to the secure version if you are viewing an empty cart and hit the continue browsing button...i had previously reported this: http://dgrin.com/showthread.php?p=296149#post296149

ahh, sweet. thanks. I will flog JT. :thwak

ZsaZsa

bigwebguy wrote:

it only redirects to the secure version if you are viewing an empty cart and hit the continue browsing button...i had previously reported this: http://dgrin.com/showthread.php?p=296149#post296149

Okay. Now I get it.

You guys are GREAT! Thank you. I really appreciate your help.

gcrider

Has a fix been created for this yet?
I see that Andy acknowledged this bug back in May, but it still persists. I first ran across this redirect problem while setting up my site. To see if it was specific to my site, I tried the following on Andy's site at http://www.moonriverphotography.com/. In IE6, once I am on Andy's home page, I go to "Buy Photos". Next, I click on "View Cart". It is empty, so I select "Continue Browsing". Since the redirect is gonig from the www.smugmug.com domain back to moonriver, the alerts start flying.

This is the culprit:

<h2 class="blue" style="text-align:center;">Your shopping cart is empty.</h2><p><form action="https://www.moonriverphotography.com/gallery/52248"><input type="submit" class="buttons" value="continue browsing"></form></p><p> </p>

The form action is going to https of a domain different from the page where "View Cart" landed the user.

My fear is that people coming to our sites will be confused by these sorts of browser alerts. This bug doesn't appear while using Firefox, but because I work in this space as a systems integrator, I always review web applications with a variety of browsers to uncover human factors problems. Since IE is such a widely used browser, especially by consumers of photography, it would be great if this bug could be eliminated.

Other than this issue, I'm totally excited about the possibilities smugmug offers all of us.

Andy

gcrider wrote:

I see that Andy acknowledged this bug back in May, but it still persists. I first ran across this redirect problem while setting up my site. To see if it was specific to my site, I tried the following on Andy's site at http://www.moonriverphotography.com/. In IE6, once I am on Andy's home page, I go to "Buy Photos". Next, I click on "View Cart". It is empty, so I select "Continue Browsing". Since the redirect is gonig from the www.smugmug.com domain back to moonriver, the alerts start flying.

This is the culprit:

<h2 class="blue" style="text-align:center;">Your shopping cart is empty.</h2><p><form action="https://www.moonriverphotography.com/gallery/52248"><input type="submit" class="buttons" value="continue browsing"></form></p><p> </p>

The form action is going to https of a domain different from the page where "View Cart" landed the user.

My fear is that people coming to our sites will be confused by these sorts of browser alerts. This bug doesn't appear while using Firefox, but because I work in this space as a systems integrator, I always review web applications with a variety of browsers to uncover human factors problems. Since IE is such a widely used browser, especially by consumers of photography, it would be great if this bug could be eliminated.

Other than this issue, I'm totally excited about the possibilities smugmug offers all of us.

The engineers have worked on this and something should be forthcoming soon I believe, stay tuned.