SOLVED - Mixed HTTP and HTTPS Conent - 5.7.5.8 - Can't find SOURCE REFERENCES to INDEX

Permalink
Hi,

I'm trying to launch my site, but it doesn't work well with mixed content on IE or FF (Chrome seems fine).

I can't find the references for:

Blocked loading mixed active content "http://turnkeymsp.net/ccm/system/css/page/1/main.less"[Learn More]http://www.turnkeymsp.net
Loading mixed (insecure) display content "http://turnkeymsp.net/application/files/4814/7544/8280/Banner.png" on a secure page[Learn More]http://www.turnkeymsp.net
GET
http://turnkeymsp.net/application/files/4814/7544/8280/Banner.png... [Mixed Content]
[HTTP/1.1 302 Found 386ms]
Loading mixed (insecure) display content "http://turnkeymsp.net//favicon.ico" on a secure page[Learn More] ContentLinkHandler.jsm:167:0
Loading mixed (insecure) display content "https://www.turnkeymsp.net/application/files/4814/7544/8280/Banner.png" on a secure page[Learn More]http://www.turnkeymsp.net
ReferenceError: ytcfg is not defined


Please help me find these references.

Scafidi454
 
ob7dev replied on at Permalink Reply
ob7dev
Scafidi454 replied on at Permalink Reply
Scafidi454
This still doesn't answer my question.

Where are all of the references to index.html stored? I mean, I can go through the main Concrete and/or the Update Concrete folders, dig through each page's code, and find it myself, but I just think it's not efficient, and should be located in one document somewhere.

Is this not the case
hutman replied on at Permalink Reply
hutman
It looks like in the header of your theme you are linking directly to your main.less file with a full http path, instead of using

<?php echo Core::make('helper/html')->css($view->getStylesheet('main.less'))?>


This is the same case forhttp://turnkeymsp.net//favicon.ico... andhttp://turnkeymsp.net/application/files/4814/7544/8280/Banner.png... for those two I would suggest changing the http:// to just // to fix the problem. All three of these issues will be found in your theme's header.
Scafidi454 replied on at Permalink Reply
Scafidi454
So, it'll all be in the main.less framework?

That sounds completely Reassuring. If I were a true developer, I'd have built it this way from the beginning.

Thank you for your support. I will report back once I've attempted this fix.
hutman replied on at Permalink Reply
hutman
No, the issues are not in the main.less file, they are in the header of your theme. The errors are caused by the way that these 3 files are included into the theme.
Scafidi454 replied on at Permalink Reply
Scafidi454
/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/css/build/core/app/marketplace/header.less

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/vendor/filp/whoops/src/Whoops/Resources/views/header.html.php

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/bg_header_active.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/bg_header.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/bg_header_editing_active.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/bg_header_active_over.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/bg_header_rib.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/dashboard/bg_header_active.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/dashboard/bg_header.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/dashboard/header_l.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/dashboard/header_r.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_add.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_loading.gif

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_permissions.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_design.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_versions.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_move_delete.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_save_arrange.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_help.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_logout.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_exit.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_exit_edit_mode.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_edit.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_properties.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/images/icons/icon_header_dashboard.png

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/dashboard/dashboard_header_four_col.php

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/dashboard/elements/header_newsflow.php

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/dashboard/elements/header.php

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/concrete/elements/header.php

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/elemental/css/build/header.less

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/elemental/elements/header.php

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/elemental/elements/header_top.php

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/blocks/autonav/templates/responsive_header_navigation

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/block_area_header_view.php

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/header_required.php

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/block_area_header.php

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/block_header_edit.php

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/page_controls_header.php

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/block_header_view.php

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/attribute/search_header.php

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/elements/conversation/count_header.php

/public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/tools/conversations/count_header.php
hutman replied on at Permalink Reply
hutman
What exactly are you trying to accomplish with this post. You do not need to search all of your files for anything. There is one file that is causing this issue and it is in your theme. Unless you are using the core elemental theme in an unusual way it should be either in the /application/themes or in the packages/ directory.
Scafidi454 replied on at Permalink Reply
Scafidi454
I'm trying to have all of my content load properly over HTTPS, but I get errors for things like:

Content Security Policy: Upgrading insecure request 'http://turnkeymsp.net/ccm/system/css/page/1/main.less' to use 'https' (unknown)
Content Security Policy: Upgrading insecure request 'http://turnkeymsp.net/application/files/4814/7544/8280/Banner.png' to use 'https'

I've searched through these files before, but even when updating them, whats to say this wont change again with update?
Scafidi454 replied on at Permalink Reply
Scafidi454
Here's why my current them is at:

/updates/concrete5.7.5.8_remote_updater/concrete/themes
Scafidi454 replied on at Permalink Reply
Scafidi454
Before I jump in (it's early still), I believe this is the one, eh?

public_html/turnkeymsp.net/updates/concrete5.7.5.8_remote_updater/concrete/themes/elemental/elements/header.php
hutman replied on at Permalink Reply
hutman
Yes, if you have been editing the Elemental theme directly in the core folder that would be the one. This is very much frowned upon, I would suggest in the future using the Clonemental package instead of editing files in the concrete directory.http://www.concrete5.org/marketplace/themes/cloneamental...
Scafidi454 replied on at Permalink Reply
Scafidi454
Is this the same as elemental? Also, what is lost? How are changes here different than changes in Elemental (when updating Concrete)?
hutman replied on at Permalink Reply
hutman
Because this theme goes in the packages directory, when you update the core it doesn't get touched, where as everything in the /concrete directory gets overwritten with the updated files.
Scafidi454 replied on at Permalink Reply
Scafidi454
No, everything I've modified is in application or in updates, which haven't usually presented a problem.

I'm SSH'd in now, and grep didn't seem to do anything for me yet, but I'm probably commanding it incorrectly.

As for these changes in application and/or updates, would you say that is safe to proceed with?

Also, is there just one INDEX of the site where all of these references are made, or is it all still just a jumbled puzzle of references?
hutman replied on at Permalink Reply
hutman
Making changes in /updates is the same as making changes in /concrete.
Scafidi454 replied on at Permalink Reply
Scafidi454
Is there a program that can search all website data for content within files?

I've tried using Dreamweaver, but it's typically the inspect function that works that way. Unfortunately, my site syncing doesn't work properly, and ends up just causing problems. So, I typically only pull, but it takes a while for the initial pull.
ob7dev replied on at Permalink Reply
ob7dev
Scafidi,

It depends what OS you're using. If you are on Mac or Linux, the best way to search the contents of files is from the command line using the "grep" command.

So if I wanted to find every file that contained header.php (just as an example) as text within a file, I could go to the root directory of my concrete5 site and search all the files for this text, like so:

grep -R "header.php"

As a developer, it is an indispensable tool.

If you're new to coding, an editor like Sublime Text may prove to put you in the mindset a little better than Dreamweaver. Just an idea. I currently use Spacemacs now, and it's a dream come true, but a much higher learning curve than something like Sublime.

Thanks,
David
Scafidi454 replied on at Permalink Reply
Scafidi454
/updates/concrete5.7.5.8_remote_updater/concrete/themes/elemental/elements/header.php


<?php defined('C5_EXECUTE') or die("Access Denied.");
$this->inc('elements/header_top.php');
$as = new GlobalArea('Header Search');
$blocks = $as->getTotalBlocksInArea();
$displayThirdColumn = $blocks > 0 || $c->isEditMode();

?>

<header>

<div class="container">
<div class="row">
<div class="col-sm-4 col-xs-6">
<?php
$a = new GlobalArea('Header Site Title');
$a->display();
?>
</div>
<div class="<?php if ($displayThirdColumn) { ?>col-sm-5 col-xs-6<?php } else { ?>col-sm-8 col-xs-6<?php } ?>">
<?php
$a = new GlobalArea('Header Navigation');
$a->display();
?>
</div>
<?php if ($displayThirdColumn) { ?>
<div class="col-sm-3 col-xs-12"><?php $as->display(); ?></div>
<?php } ?>
</div>
</div>
</header>
Scafidi454 replied on at Permalink Reply
Scafidi454
/updates/concrete5.7.5.8_remote_updater/concrete/themes/elemental/elements/header_top.php



<?php defined('C5_EXECUTE') or die("Access Denied."); ?>
<!DOCTYPE html>
<html lang="<?php echo Localization::activeLanguage()?>">
<head>
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<link rel="shortcut icon" href="<?php echo URL::to(""); ?>/favicon.ico">
<link rel="stylesheet" type="text/css" href="<?php echo $view->getThemePath()?>/css/bootstrap-modified.css">
<?php echo $html->css($view->getStylesheet('main.less'))?>
<?php Loader::element('header_required', array('pageTitle' => isset($pageTitle) ? $pageTitle : '', 'pageDescription' => isset($pageDescription) ? $pageDescription : '', 'pageMetaKeywords' => isset($pageMetaKeywords) ? $pageMetaKeywords : ''));?>
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<script>
if (navigator.userAgent.match(/IEMobile\/10\.0/)) {
var msViewportStyle = document.createElement('style')
msViewportStyle.appendChild(
document.createTextNode(
'@-ms-viewport{width:auto!important}'
)
)
document.querySelector('head').appendChild(msViewportStyle)
}
</script>
</head>
<body>

<div class="<?php echo $c->getPageWrapperClass()?>">
Scafidi454 replied on at Permalink Reply
Scafidi454
I went back and checked the file properties in Concrete (https). Then, I checked the reference in the header (https).

I tried to use grep -i and -w, but I wasn't able to get anything on my SSH (shared server, maybe why just hung).

I did notice that there was a Concrete5 update from my 5.7.5.8 to 5.7.5.13. After backing up and updating, the site began working in IE, Chrome, Safari, and Firefox (maintenance mode disabled, and logged out (on most browsers)).

Then, I had my hosting provider verify on their end; confirmed.

SOLVED

Thanks to everyone for their input, and I apologize for my lack of response in such a long time; I've been busy.

Thank you,
Tyler Scafidi