Cross-Origin Request Blocked issue with my website

[aarondowling]

I was having a problem with my website.  Some customers were adding items cart but the loading wheel would keep spinning and nothing would happen. GJC Web Design helped to discover the issue which was Cross-Origin Request Blocked query (see message with solution below)

I fixed this issue and no one complained about adding to cart anymore. However I am receiving orders from some customers complaining about the same issue when they press "Confirm Purchase" in the shopping cart.  I thought we corrected the issue but is there something else we are not doing right?

I can actually see others customers online get to shopping cart after adding items and then not placing order so im guessing quite a few people are having the issue.


Joomla 3.4.3 and virtuemart version is 3.0.9

The website is www.paperbear.ie


Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at https://paperbear.ie/index.php?option=com_virtuemart&nosef=1&view=cart&task=addJS&format=json. (Reason: CORS header 'Access-Control-Allow-Origin' missing).

in simple terms your not forcing either https://paperbear.ie or https://www.paperbear.ie

add to cart works with https://paperbear.ie  - not with https://www.paperbear.ie because it is trying to load resources from https://paperbear.ie and thats not allowed with https -- the domain must be identical

simplest way is to just right a htaccess that forces either with or without www

[GJC Web Design]

But you need to be pro-active with this

fire up every browser you can find and make orders.. it is the only way you will find the problem...

[aarondowling]

I didn't think it was a browser issue. I thought it was a similar issue which me and my programmer didn't spot.

No worries we'll have try out a few things and see if we can spot an issue. Maybe its an isolated problem.

[GJC Web Design]

but if only a % of users are having this problem what else can it be?

The cross origin is technically a browser issue as well..  older browsers didn't care and would serve up resources from another "server"

[aarondowling]

Fair enough. Thanks again for your input