Mix Content Over HTTPS://

  • JJ Smith

    (@igotasolutions)


    9 years, 8 months ago

    Recently I took a site over for a client and added https:// to the site. Everything is secure, but I get the error below. I turned off all the plugins and it still did it. I checked the theme which is called INOVADO Version: 2.0 and don’t seem to see anywhere they put it anything for the Google Maps. I’ve been searching and I’ve come up short. Any ideas on how to fix this?

    Thanks

    Mixed Content: The page at ‘https://www.starself.com/’ was loaded over HTTPS, but requested an insecure script ‘http://maps.google.com/maps/api/js?sensor=false’. This request has been blocked; the content must be served over HTTPS.

    • This topic was modified 9 years, 8 months ago by JJ Smith.
Viewing 10 replies - 1 through 10 (of 10 total)
  • catacaustic

    (@catacaustic)

    9 years, 8 months ago

    You need to find out what’s requesting that JavaScript file,a nd change the URL so that it’s uses https://.

    Thread Starter JJ Smith

    (@igotasolutions)

    9 years, 8 months ago

    I can’t seem to find it. Any ideas where to start?

    catacaustic

    (@catacaustic)

    9 years, 8 months ago

    Well, it’s in the sites <head>, so I’d start by looking in the header.php file of your theme.

    If there’s nothing there it could be in the theme or in a plugin, so you’d need to do the standard debugging procedure of deactivateing all (yes all) plugins, and reverting to a default untouched (Twenty*) theme. From there, re-enable everything one-by-one until you find out which one is causing that issue.

    Of course, if you had a local copy of the code, you could use most good IDE’s to do a global search for that string, and you’d find it pretty quickly.

    Mark Ratledge

    (@songdogtech)

    9 years, 8 months ago

    Use the developer tools in Firefox (or Firebug) or Chrome or Safari or IE to see the errors with specific images, files or other resources, like that javascript link you found.

    You need to remove the http: from absolute paths in php theme files, such as in functions.php or header.php, i.e. change 'http://example.com/image.jpg' to '//example.com/image.jpg'; that will allow your resources to default to https.

    If you also see insecure links for images, you need to change URLs of media items in the post/page content to https. Search RegEx is a good plugin to be able to search and replace (optionally with grep) through all posts, pages, excerpts, comments, titles and meta. And, interconnectit.com WordPress Serialized PHP Search Replace Tool can be used to find/replace in the entire database, i.e. metadata, GUIDs and widget content, etc.

    You may need to change to a relative path for images in CSS files, i.e. background-image: url(http://example.com/themes/wp-content/theme/images/image.jpg) to background-image: url(images/image.jpg)

    • This reply was modified 9 years, 8 months ago by Mark Ratledge.
    Thread Starter JJ Smith

    (@igotasolutions)

    9 years, 8 months ago

    Guys, I have done all the above. I went through the whole theme and site and still can’t find it. It’s telling me index 1. Where is that at?

    Thanks

    <!–[if lt IE 9]>
    <script src=”https://html5shim.googlecode.com/svn/trunk/html5.js”></script&gt;
    <![endif]–>

    Thread Starter JJ Smith

    (@igotasolutions)

    9 years, 8 months ago

    I fixed the one link above as you can see, but I can’t find this script below. Say something about index 1.

    Thanks

    <script type=”text/javascript” src=”http://maps.google.com/maps/api/js?sensor=false”></script&gt;

    Thread Starter JJ Smith

    (@igotasolutions)

    9 years, 8 months ago

    Update: I installed the twentysixteen theme and it went away instantly. Now where is this thing at, lol.

    Thanks for all the help. I truly appreciate it.

    Thread Starter JJ Smith

    (@igotasolutions)

    9 years, 8 months ago

    Just got done trying everything and I can’t seem to find it. When I switch themes it goes away. Any ideas what to do next?

    catacaustic

    (@catacaustic)

    9 years, 8 months ago

    That means that it’s either some part of your theme, or your theme is adding a widget or something that uses it. As that bit of code is in your head area, I’d guess that the theme is adding it in.

    As you’re using a commercial theme you will have to go back and ask the author/vendor that you got the theme from for support with this as no one here is given access to the code from that theme.

    https://codex.ww.wp.xz.cn/Forum_Welcome#Commercial_Products

    Thread Starter JJ Smith

    (@igotasolutions)

    9 years, 8 months ago

    I’ve checked over and over. I emailed the designer of the theme. I’ve not been able to find something. This one got me beat, lol.

    Thanks for all the help!!!

Viewing 10 replies - 1 through 10 (of 10 total)

The topic ‘Mix Content Over HTTPS://’ is closed to new replies.

Tags