After upgrading to Drupal 4.7 with the appropriate version of the secure pages module, I get the redirect messages and the "secure and nonsecure" items message when viewing my site's secure pages with Internet Explorer (not with Firefox!).

I have tried to apply the following fix to drupal's drupal.js file, as described here:
http://drupal.org/node/64711

And here:
http://drupal.org/node/60565

I have also checked that all of my links are relative; I do have links to my style sheets in page.tpl.php like this: /style.css. But I tried deleting these styles and they had no effect on the secure/non-secure messages.

Is there something that needs to be changed in this module to address the IE bug?

Thanks for your help.

Comments

bomarmonk’s picture

bomarmonk commented

This may be related: with secure pages enabled, my site's mission statement disappears... odd. I disable the secure pages module, and the mission statement returns.

gordon’s picture

gordon commented

This not a secure pages issue. Secure pages only redirects between the secure and insecure pages.

The most likely candidate for this problem is flash, which has a pointer to insecure pages.

bomarmonk’s picture

bomarmonk commented

Are we talking Macromedia Flash? I don't have any flash, as far as I know... any suggestions how to resolve this? Thanks for your feedback or suggestions.

gordon’s picture

gordon commented

Your drupal pages should be fine under 4.7. If you have things like adsense, or other banners, embedded objects then this is what maybe causing the issue.

bomarmonk’s picture

bomarmonk commented

No Adsense, although I do have CiviCRM... and related blocks enabled. Could this be the problem?

bomarmonk’s picture

bomarmonk commented

Hmmm.... even without the patch the mission statement for my site disappears... odd (this could be an unrelated theme issue but it does seem to happen only when secure pages is enabled).

Also, I tried disabling CiviCRM and the non-secure messages still show up. I tried adding the switch code to the civiCRM settings file in my sites directory. The issue is still unresolved.

I thank you for any further suggestions...

gordon’s picture

gordon commented

Check the page for http links, also check any images that are being loaded, this included stuff from your css.

If you can post a link to the problematic page and I wil take a look if I get a chance.

bomarmonk’s picture

bomarmonk commented

Pretty much every page that is secured is getting the messages: http://www.alpinecountyca.com/ (I currently have the secure pages module disabled).

gordon’s picture

gordon commented

I have found your problem. It is the valid xhtml icon which is being retrived from a in-secure site.

http://www.w3.org/Icons/valid-xhtml10

Gordon

gordon’s picture

gordon commented
Status: Active » Fixed
bomarmonk’s picture

bomarmonk commented

Thank you. I guess I should have figured this one out. Sorry to trouble you.

Anonymous’s picture

(not verified) commented
Status: Fixed » Closed (fixed)