By PaulWood on

I just purchased and had installed an SSL certificate for my site. I am also using the "Secure Pages" module. All works fine. The address bar indicates https://... vs http://... on the pages designated in the "Secure Pages" configuration. I am using CCK on some pages designated to be secure.

When using FoxFire (3.x), I clearly see the SSL padlock icon in the bottom status bar.

When using IE6 or IE7, the padlock icon appears while the page is loading or being refreshed; however, it disappears once page has finished loading. The address bar continues to display https://... This appears to be the case ONLY when an anonymous user attempts to create a new account (.../user/register). The registration page has several CCK fields and CAPTCHA. It is the only secure page that an anonymous user has access to. When an authenticated user is logged in, the padlock icon appears OK when on their .../user/#/edit/... page and any other secured page.

While SSL / Secure Pages appears to be working fine, I am puzzled as to why the padlock icon appears and then disappears for anonymous users when accessing a secure page (.../user/register). Since it disappears on the registration page, the user may think they are supplying private information on an unsecure page.

⋅ Categories: Drupal 5.x

Comments

vkr11’s picture

vkr11 commented

I am also having similar issue, any comments?

- Victor
Search Drupal.org | Lamingo | Tax India | Drupal Jobs | FPGA

molvar’s picture

molvar commented

I am having this same problem. I am no longer using Secure Pages, instead I have the entire website using the SSL with the .htaccess file. So the SSL works perfectly fine on every page of my site EXCEPT the registration page. The url is still "https", but the padlock goes away only on this page. The really frustrating thing is the fact that this is THE primary page that I have the SSL certificate for to begin with!

The only thing I see different with this page is the Captcha module being used there. Does anyone have a solution for this problem?

Thanks!

molvar’s picture

molvar commented

The module I am running on the registration page is Mollum, not "captcha". Mollum contains a captcha feature. When I disable that feature the SSL works like a champ - padlock symbol and all.

apitch’s picture

apitch commented

The image path for CAPTCHA needs to support HTTPS. Add *_captcha/* in “Pages which will be secure” under "Secure Pages".

j.mead’s picture

j.mead commented

THANK YOU! I had a terrible time getting this one last bit secure, and I have CAPTCHA on the contact form too, so now I think every where it makes sense (and then some), the pages are displayed as secure.

gillypots’s picture

gillypots commented

I was having the exact same issue and couldn't work out what was going on but this post led me to the answer and now my pages are secure, can't thank you enough !!!!!!