SOLVED - Mixed HTTP and HTTPS Conent - 5.7.5.8 - Can't find SOURCE REFERENCES to INDEX
Permalink
Hi,
I'm trying to launch my site, but it doesn't work well with mixed content on IE or FF (Chrome seems fine).
I can't find the references for:
Blocked loading mixed active content "http://turnkeymsp.net/ccm/system/css/page/1/main.less"[Learn More]http://www.turnkeymsp.net
Loading mixed (insecure) display content "http://turnkeymsp.net/application/files/4814/7544/8280/Banner.png" on a secure page[Learn More]http://www.turnkeymsp.net
GET
http://turnkeymsp.net/application/files/4814/7544/8280/Banner.png... [Mixed Content]
[HTTP/1.1 302 Found 386ms]
Loading mixed (insecure) display content "http://turnkeymsp.net//favicon.ico" on a secure page[Learn More] ContentLinkHandler.jsm:167:0
Loading mixed (insecure) display content "https://www.turnkeymsp.net/application/files/4814/7544/8280/Banner.png" on a secure page[Learn More]http://www.turnkeymsp.net
ReferenceError: ytcfg is not defined
Please help me find these references.
I'm trying to launch my site, but it doesn't work well with mixed content on IE or FF (Chrome seems fine).
I can't find the references for:
Blocked loading mixed active content "http://turnkeymsp.net/ccm/system/css/page/1/main.less"[Learn More]http://www.turnkeymsp.net
Loading mixed (insecure) display content "http://turnkeymsp.net/application/files/4814/7544/8280/Banner.png" on a secure page[Learn More]http://www.turnkeymsp.net
GET
http://turnkeymsp.net/application/files/4814/7544/8280/Banner.png... [Mixed Content]
[HTTP/1.1 302 Found 386ms]
Loading mixed (insecure) display content "http://turnkeymsp.net//favicon.ico" on a secure page[Learn More] ContentLinkHandler.jsm:167:0
Loading mixed (insecure) display content "https://www.turnkeymsp.net/application/files/4814/7544/8280/Banner.png" on a secure page[Learn More]http://www.turnkeymsp.net
ReferenceError: ytcfg is not defined
Please help me find these references.
See this post:https://www.concrete5.org/community/forums/5-7-discussion/https-only...
This still doesn't answer my question.
Where are all of the references to index.html stored? I mean, I can go through the main Concrete and/or the Update Concrete folders, dig through each page's code, and find it myself, but I just think it's not efficient, and should be located in one document somewhere.
Is this not the case
Where are all of the references to index.html stored? I mean, I can go through the main Concrete and/or the Update Concrete folders, dig through each page's code, and find it myself, but I just think it's not efficient, and should be located in one document somewhere.
Is this not the case
It looks like in the header of your theme you are linking directly to your main.less file with a full http path, instead of using
This is the same case forhttp://turnkeymsp.net//favicon.ico... andhttp://turnkeymsp.net/application/files/4814/7544/8280/Banner.png... for those two I would suggest changing the http:// to just // to fix the problem. All three of these issues will be found in your theme's header.
<?php echo Core::make('helper/html')->css($view->getStylesheet('main.less'))?>
This is the same case forhttp://turnkeymsp.net//favicon.ico... andhttp://turnkeymsp.net/application/files/4814/7544/8280/Banner.png... for those two I would suggest changing the http:// to just // to fix the problem. All three of these issues will be found in your theme's header.
So, it'll all be in the main.less framework?
That sounds completely Reassuring. If I were a true developer, I'd have built it this way from the beginning.
Thank you for your support. I will report back once I've attempted this fix.
That sounds completely Reassuring. If I were a true developer, I'd have built it this way from the beginning.
Thank you for your support. I will report back once I've attempted this fix.
No, the issues are not in the main.less file, they are in the header of your theme. The errors are caused by the way that these 3 files are included into the theme.
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/css/build/core/app/marketplace/header.less
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/vendor/filp/whoops/src/Whoops/Resources/views/header.html.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/bg_header_active.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/bg_header.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/bg_header_editing_active.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/bg_header_active_over.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/bg_header_rib.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/dashboard/bg_header_active.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/dashboard/bg_header.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/dashboard/header_l.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/dashboard/header_r.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_add.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_loading.gif
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_permissions.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_design.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_versions.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_move_delete.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_save_arrange.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_help.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_logout.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_exit.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_exit_edit_mode.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_edit.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_properties.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_dashboard.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/dashboard/dashboard_header_four_col.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/dashboard/elements/header_newsflow.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/dashboard/elements/header.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/concrete/elements/header.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/elemental/css/build/header.less
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/elemental/elements/header.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/elemental/elements/header_top.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/blocks/autonav/templates/responsive_header_navigation
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/block_area_header_view.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/header_required.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/block_area_header.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/block_header_edit.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/page_controls_header.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/block_header_view.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/attribute/search_header.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/conversation/count_header.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/tools/conversations/count_header.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/vendor/filp/whoops/src/Whoops/Resources/views/header.html.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/bg_header_active.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/bg_header.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/bg_header_editing_active.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/bg_header_active_over.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/bg_header_rib.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/dashboard/bg_header_active.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/dashboard/bg_header.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/dashboard/header_l.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/dashboard/header_r.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_add.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_loading.gif
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_permissions.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_design.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_versions.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_move_delete.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_save_arrange.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_help.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_logout.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_exit.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_exit_edit_mode.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_edit.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_properties.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_dashboard.png
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/dashboard/dashboard_header_four_col.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/dashboard/elements/header_newsflow.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/dashboard/elements/header.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/concrete/elements/header.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/elemental/css/build/header.less
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/elemental/elements/header.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/elemental/elements/header_top.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/blocks/autonav/templates/responsive_header_navigation
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/block_area_header_view.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/header_required.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/block_area_header.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/block_header_edit.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/page_controls_header.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/block_header_view.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/attribute/search_header.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/conversation/count_header.php
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/tools/conversations/count_header.php
What exactly are you trying to accomplish with this post. You do not need to search all of your files for anything. There is one file that is causing this issue and it is in your theme. Unless you are using the core elemental theme in an unusual way it should be either in the /application/themes or in the packages/ directory.
I'm trying to have all of my content load properly over HTTPS, but I get errors for things like:
Content Security Policy: Upgrading insecure request 'http://turnkeymsp.net/ccm/system/css/page/1/main.less' to use 'https' (unknown)
Content Security Policy: Upgrading insecure request 'http://turnkeymsp.net/application/files/4814/7544/8280/Banner.png' to use 'https'
I've searched through these files before, but even when updating them, whats to say this wont change again with update?
Content Security Policy: Upgrading insecure request 'http://turnkeymsp.net/ccm/system/css/page/1/main.less' to use 'https' (unknown)
Content Security Policy: Upgrading insecure request 'http://turnkeymsp.net/application/files/4814/7544/8280/Banner.png' to use 'https'
I've searched through these files before, but even when updating them, whats to say this wont change again with update?
Here's why my current them is at:
/updates/concrete5.7.5.8_remote_updater/concrete/themes
/updates/concrete5.7.5.8_remote_updater/concrete/themes
Before I jump in (it's early still), I believe this is the one, eh?
public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/elemental/elements/header.php
public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/elemental/elements/header.php
Yes, if you have been editing the Elemental theme directly in the core folder that would be the one. This is very much frowned upon, I would suggest in the future using the Clonemental package instead of editing files in the concrete directory.http://www.concrete5.org/marketplace/themes/cloneamental...
Is this the same as elemental? Also, what is lost? How are changes here different than changes in Elemental (when updating Concrete)?
Because this theme goes in the packages directory, when you update the core it doesn't get touched, where as everything in the /concrete directory gets overwritten with the updated files.
No, everything I've modified is in application or in updates, which haven't usually presented a problem.
I'm SSH'd in now, and grep didn't seem to do anything for me yet, but I'm probably commanding it incorrectly.
As for these changes in application and/or updates, would you say that is safe to proceed with?
Also, is there just one INDEX of the site where all of these references are made, or is it all still just a jumbled puzzle of references?
I'm SSH'd in now, and grep didn't seem to do anything for me yet, but I'm probably commanding it incorrectly.
As for these changes in application and/or updates, would you say that is safe to proceed with?
Also, is there just one INDEX of the site where all of these references are made, or is it all still just a jumbled puzzle of references?
Making changes in /updates is the same as making changes in /concrete.
Is there a program that can search all website data for content within files?
I've tried using Dreamweaver, but it's typically the inspect function that works that way. Unfortunately, my site syncing doesn't work properly, and ends up just causing problems. So, I typically only pull, but it takes a while for the initial pull.
I've tried using Dreamweaver, but it's typically the inspect function that works that way. Unfortunately, my site syncing doesn't work properly, and ends up just causing problems. So, I typically only pull, but it takes a while for the initial pull.
Scafidi,
It depends what OS you're using. If you are on Mac or Linux, the best way to search the contents of files is from the command line using the "grep" command.
So if I wanted to find every file that contained header.php (just as an example) as text within a file, I could go to the root directory of my concrete5 site and search all the files for this text, like so:
grep -R "header.php"
As a developer, it is an indispensable tool.
If you're new to coding, an editor like Sublime Text may prove to put you in the mindset a little better than Dreamweaver. Just an idea. I currently use Spacemacs now, and it's a dream come true, but a much higher learning curve than something like Sublime.
Thanks,
David
It depends what OS you're using. If you are on Mac or Linux, the best way to search the contents of files is from the command line using the "grep" command.
So if I wanted to find every file that contained header.php (just as an example) as text within a file, I could go to the root directory of my concrete5 site and search all the files for this text, like so:
grep -R "header.php"
As a developer, it is an indispensable tool.
If you're new to coding, an editor like Sublime Text may prove to put you in the mindset a little better than Dreamweaver. Just an idea. I currently use Spacemacs now, and it's a dream come true, but a much higher learning curve than something like Sublime.
Thanks,
David
/updates/concrete5.7.5.8_remote_updater/concrete/themes/elemental/elements/header.php
<?php defined('C5_EXECUTE') or die("Access Denied.");
$this->inc('elements/header_top.php');
$as = new GlobalArea('Header Search');
$blocks = $as->getTotalBlocksInArea();
$displayThirdColumn = $blocks > 0 || $c->isEditMode();
?>
<header>
<div class="container">
<div class="row">
<div class="col-sm-4 col-xs-6">
<?php
$a = new GlobalArea('Header Site Title');
$a->display();
?>
</div>
<div class="<?php if ($displayThirdColumn) { ?>col-sm-5 col-xs-6<?php } else { ?>col-sm-8 col-xs-6<?php } ?>">
<?php
$a = new GlobalArea('Header Navigation');
$a->display();
?>
</div>
<?php if ($displayThirdColumn) { ?>
<div class="col-sm-3 col-xs-12"><?php $as->display(); ?></div>
<?php } ?>
</div>
</div>
</header>
<?php defined('C5_EXECUTE') or die("Access Denied.");
$this->inc('elements/header_top.php');
$as = new GlobalArea('Header Search');
$blocks = $as->getTotalBlocksInArea();
$displayThirdColumn = $blocks > 0 || $c->isEditMode();
?>
<header>
<div class="container">
<div class="row">
<div class="col-sm-4 col-xs-6">
<?php
$a = new GlobalArea('Header Site Title');
$a->display();
?>
</div>
<div class="<?php if ($displayThirdColumn) { ?>col-sm-5 col-xs-6<?php } else { ?>col-sm-8 col-xs-6<?php } ?>">
<?php
$a = new GlobalArea('Header Navigation');
$a->display();
?>
</div>
<?php if ($displayThirdColumn) { ?>
<div class="col-sm-3 col-xs-12"><?php $as->display(); ?></div>
<?php } ?>
</div>
</div>
</header>
/updates/concrete5.7.5.8_remote_updater/concrete/themes/elemental/elements/header_top.php
<?php defined('C5_EXECUTE') or die("Access Denied."); ?>
<!DOCTYPE html>
<html lang="<?php echo Localization::activeLanguage()?>">
<head>
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<link rel="shortcut icon" href="<?php echo URL::to(""); ?>/favicon.ico">
<link rel="stylesheet" type="text/css" href="<?php echo $view->getThemePath()?>/css/bootstrap-modified.css">
<?php echo $html->css($view->getStylesheet('main.less'))?>
<?php Loader::element('header_required', array('pageTitle' => isset($pageTitle) ? $pageTitle : '', 'pageDescription' => isset($pageDescription) ? $pageDescription : '', 'pageMetaKeywords' => isset($pageMetaKeywords) ? $pageMetaKeywords : ''));?>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<script>
if (navigator.userAgent.match(/IEMobile\/10\.0/)) {
var msViewportStyle = document.createElement('style')
msViewportStyle.appendChild(
document.createTextNode(
'@-ms-viewport{width:auto!important}'
)
)
document.querySelector('head').appendChild(msViewportStyle)
}
</script>
</head>
<body>
<div class="<?php echo $c->getPageWrapperClass()?>">
<?php defined('C5_EXECUTE') or die("Access Denied."); ?>
<!DOCTYPE html>
<html lang="<?php echo Localization::activeLanguage()?>">
<head>
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<link rel="shortcut icon" href="<?php echo URL::to(""); ?>/favicon.ico">
<link rel="stylesheet" type="text/css" href="<?php echo $view->getThemePath()?>/css/bootstrap-modified.css">
<?php echo $html->css($view->getStylesheet('main.less'))?>
<?php Loader::element('header_required', array('pageTitle' => isset($pageTitle) ? $pageTitle : '', 'pageDescription' => isset($pageDescription) ? $pageDescription : '', 'pageMetaKeywords' => isset($pageMetaKeywords) ? $pageMetaKeywords : ''));?>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<script>
if (navigator.userAgent.match(/IEMobile\/10\.0/)) {
var msViewportStyle = document.createElement('style')
msViewportStyle.appendChild(
document.createTextNode(
'@-ms-viewport{width:auto!important}'
)
)
document.querySelector('head').appendChild(msViewportStyle)
}
</script>
</head>
<body>
<div class="<?php echo $c->getPageWrapperClass()?>">
I went back and checked the file properties in Concrete (https). Then, I checked the reference in the header (https).
I tried to use grep -i and -w, but I wasn't able to get anything on my SSH (shared server, maybe why just hung).
I did notice that there was a Concrete5 update from my 5.7.5.8 to 5.7.5.13. After backing up and updating, the site began working in IE, Chrome, Safari, and Firefox (maintenance mode disabled, and logged out (on most browsers)).
Then, I had my hosting provider verify on their end; confirmed.
SOLVED
Thanks to everyone for their input, and I apologize for my lack of response in such a long time; I've been busy.
Thank you,
Tyler Scafidi
I tried to use grep -i and -w, but I wasn't able to get anything on my SSH (shared server, maybe why just hung).
I did notice that there was a Concrete5 update from my 5.7.5.8 to 5.7.5.13. After backing up and updating, the site began working in IE, Chrome, Safari, and Firefox (maintenance mode disabled, and logged out (on most browsers)).
Then, I had my hosting provider verify on their end; confirmed.
SOLVED
Thanks to everyone for their input, and I apologize for my lack of response in such a long time; I've been busy.
Thank you,
Tyler Scafidi