The Box API wants me to turn http:// into https://. I'm so damn close to figuring this out. The only problem - it works only sometimes. You can see what I mean in the attached grabs. You can also experience it live on Flakr.com. If you visit the site you'll see a yellow lock in the address bar; but if you view the source, you'll see a green lock. I'm confused. Bluehost hosts my site.

I changed the protocol on line 6 in concrete/startup/url_check.php to "https://" and added the following lines to my config/site.php.



I've also implemented the Force SSL add-on. Sometimes it works, sometimes it doesn't, regardless of whether the user is signed into the site.

Any ideas? Thanks up front.

-Jason

P.S. These posts helped me out:

http://www.concrete5.org/community/forums/installation/ssl/...
http://www.concrete5.org/documentation/how-tos/developers/using-a-s...
http://www.concrete5.org/community/forums/customizing_c5/custom-ssl...
http://www.concrete5.org/community/forums/usage/https-redirect/...
http://www.concrete5.org/community/forums/chat/how-to-install-ssl/...