VirtueMart Forum

VirtueMart 2 + 3 + 4 => Security (https) / Performance / SEO, SEF, URLs => Topic started by: ncopeman on August 27, 2012, 05:47:15 AM

Title: Insecure content from jquery.min.js
Post by: ncopeman on August 27, 2012, 05:47:15 AM
Hi there, i've painfully gone through my site to remove all of the insecure content loaded through SSL and now I only have two files to fix on my checkout.

One is jquery.min.js - loaded through Mowebso. Its loading the below libraries/mowebso/assets  through http instead of https. I suspect it could be 'global $mowebso;' but I don't speak code too well. Is there anyway of loading below / changing the code below to load JURI::base( true ) and then jquery.min.js ? This seems to have fixed quite a few files trying to load http!

function loadjQueryLibrary() {
global $mowebso;
$mowebso->addScript('jquery.min.js','libraries/mowebso/assets/js/','text/javascript',false);
}
Title: Re: Insecure content from jquery.min.js
Post by: jjk on August 27, 2012, 18:19:36 PM
I'm not shure if I'm correct, but an initial solution might be to enable "Use external google jQuery library" in VM2 configuration. As far as I know, the 'Google Ajax API CDN' supports loading SSL via HTTPS.
Title: Re: Insecure content from jquery.min.js
Post by: PRO on August 27, 2012, 19:23:54 PM
sounds like you have the "var live" site set to an absolute url. in your configuration.php

Title: Re: Insecure content from jquery.min.js
Post by: ncopeman on August 28, 2012, 01:22:19 AM
Quote from: jjk on August 27, 2012, 18:19:36 PM
I'm not shure if I'm correct, but an initial solution might be to enable "Use external google jQuery library" in VM2 configuration. As far as I know, the 'Google Ajax API CDN' supports loading SSL via HTTPS.

Thanks bud but I don't have an option in config for google jQuery. I'm using 2.0.6 but I do have Virtuemart jQuery selected
Title: Re: Insecure content from jquery.min.js
Post by: ncopeman on August 28, 2012, 01:29:56 AM
Quote from: PRO on August 27, 2012, 19:23:54 PM
sounds like you have the "var live" site set to an absolute url. in your configuration.php

Hi Pro, live_site is blank in configuration.php . The whole insecure content has been a real pain... you can look at everything that i've tried to fix it here:

http://forum.joomla.org/viewtopic.php?f=624&t=731440

Switching off SEF pretty much cleared the 'insecure content' warnings bar a handful. I only now need to fix jquery.min.js from mosoweb.php
Title: Re: Insecure content from jquery.min.js
Post by: jjk on August 28, 2012, 09:32:51 AM
Quote from: ncopeman on August 28, 2012, 01:22:19 AM
...but I don't have an option in config for google jQuery. I'm using 2.0.6 but I do have Virtuemart jQuery selected

I don't remember in which version that configuration option was added. But I would recommend to update to version 2.0.10 anyway. The longer you wait with the updates, the harder it becomes.  ;)
In newer versions of VM2 the Google jQuery option is in the 'Configuration' - 'Templates' tab.

Another possible option might be to use one of the SSL redirect plugins available in the Joomla Extension Directory, but I never tried this, so I don't know if this provides a solution.
Title: Re: Insecure content from jquery.min.js
Post by: PRO on August 28, 2012, 13:49:43 PM
Quote from: ncopeman on August 28, 2012, 01:29:56 AM
Quote from: PRO on August 27, 2012, 19:23:54 PM
sounds like you have the "var live" site set to an absolute url. in your configuration.php

Hi Pro, live_site is blank in configuration.php . The whole insecure content has been a real pain... you can look at everything that i've tried to fix it here:

http://forum.joomla.org/viewtopic.php?f=624&t=731440

Switching off SEF pretty much cleared the 'insecure content' warnings bar a handful. I only now need to fix jquery.min.js from mosoweb.php

are you using standard joomla SEF
??

Title: Re: Insecure content from jquery.min.js
Post by: ncopeman on August 28, 2012, 15:58:40 PM
Quote from: PRO on August 28, 2012, 13:49:43 PM
Quote from: ncopeman on August 28, 2012, 01:29:56 AM
Quote from: PRO on August 27, 2012, 19:23:54 PM
sounds like you have the "var live" site set to an absolute url. in your configuration.php

Hi Pro, live_site is blank in configuration.php . The whole insecure content has been a real pain... you can look at everything that i've tried to fix it here:

http://forum.joomla.org/viewtopic.php?f=624&t=731440

Switching off SEF pretty much cleared the 'insecure content' warnings bar a handful. I only now need to fix jquery.min.js from mosoweb.php

are you using standard joomla SEF
??

Hi Pro, I was using standard joomla SEF - I've turned it off...
Title: Re: Insecure content from jquery.min.js
Post by: PRO on August 28, 2012, 16:51:22 PM
ok, so at first, I didnt know what "mowebso" was.

So, this is a 3rd party component for mobile sites?


Have you reported this to them??
Title: Re: Insecure content from jquery.min.js
Post by: jjk on August 28, 2012, 17:11:45 PM
@ PRO
mowebso = http://extensions.virtuemart.net/manufacturer/mowebso (http://extensions.virtuemart.net/manufacturer/mowebso)  :)