By PaulWood on

I am in the process of converting my site from Drupal-5 to Drupal-6. I am running SecurePages in each (5.x-1.7 and 6.x-1.8, respectively).

All seems OK with 5.x; however, with 6.x in FireFox, I am getting a red exclamation point over the padlock icon in the browser status bar (message is "Warning: Contains unauthenticated content"). In 5.x, the padlock icon was OK. I have no reason to believe that the 6.x issue is due to SecurePages, but rather due to something I might have done differently in 6.x. The pages specified on the SecurePages configuration page are identical for both installations. Setting back to default (pages and ignore pages) still shows as unauthenticated.

Any ideas on where I might look to resolve this difference?

⋅ Categories: Drupal 6.x

Comments

pobster’s picture

pobster commented

It's probably that something on that page is calling a url without using https.

Pobster

PaulWood’s picture

PaulWood commented

Thanks, Pobster.

I floated the mouse over all the visible links on "My Account" page and found all showing links as "https://...".

Edit: I searched the source and found the following as the last line before {<}/head{>}:
<script type="text/javascript" src="http://www.sandlotsociety.com/dev4/sites/all/themes/sandlot/js/pickstyle.js"></script> The version of my theme (Newsflash) for 5.x did not have this reference.

Also, two references to "http://www.w3.org..." at the beginning of the source.

PaulWood’s picture

PaulWood commented

Pobster,

Your tip certainly pointed me in the right direction. I ended up editing page.tpl.php as follows:

Replaced:
<script type="text/javascript" src="<?php print $GLOBALS['base_url'] ."/"; print $directory; ?>/js/pickstyle.js"></script>
With:
<script type="text/javascript" src="<?php print $base_path ."/"; print $directory; ?>/js/pickstyle.js"></script>

The use of $GLOBALS['base_url'] rather than $base_path was the cause.