I have implement wysiwyg text editor in magento for my custom module. On my local machine it is working properly.

When I upload my code on live server then wysiwyg showing blank image popup. Please find attached screenshot of the error which I am getting.

Any one can please advice.enter image description here

closed as off-topic by zhartaunik, 7ochem, Marius Jun 2 '15 at 9:04

This question appears to be off-topic. The users who voted to close gave these specific reasons:

  • "Questions on problems in code you've written must describe the specific problem and include valid code to reproduce it. For help writing short, self-contained syntactically-valid examples, see: http://sscce.org/" – Marius
  • "Questions describing a problem that can't be reproduced OR seemingly went away on its own (or went away when a typo was fixed) are off-topic as they are unlikely to help future readers." – zhartaunik, 7ochem
If this question can be reworded to fit the rules in the help center, please edit the question.

  • Have you flushed the cache? Can you check the logs to see if there is some error there (under var/log/)? Also check the firebug console for errors. – lloiacono Jun 2 '15 at 7:43
  • No error in logs. Although I am getting an error in firebug console Blocked loading mixed active content "domainname/index.php/admin/cms_wysiwyg_images/index/…" – Neeraj Sharma Jun 2 '15 at 7:45
  • Cache also clear. Folder permission for wysiwyg is also set to 777. – Neeraj Sharma Jun 2 '15 at 7:49
  • Did you already try to turn on ini_set('display_errors', 1) in index.php? – 7ochem Jun 2 '15 at 8:25

Try changing your urls from http to https in the ajax request to fix the "Blocked loading mixed active content".

What is Mixed Content? When a user visits a page served over HTTP, their connection is open for eavesdropping and man-in-the-middle (MITM) attacks. When a user visits a page served over HTTPS, their connection with the web server is authenticated and encrypted with SSL and hence safeguarded from eavesdroppers and MITM attacks.

However, if an HTTPS page includes HTTP content, the HTTP portion can be read or modified by attackers, even though the main page is served over HTTPS. When an HTTPS page has HTTP content, we call that content “mixed”. The webpage that the user is visiting is only partially encrypted, since some of the content is retrieved unencrypted over HTTP. The Mixed Content Blocker blocks certain HTTP requests on HTTPS pages.

Credit goes to this answer, check it for more info: https://stackoverflow.com/a/18251129/1016425

  • @OP You might also want to google "javascript same origin policy" – Fabian Blechschmidt Jun 2 '15 at 8:39

Not the answer you're looking for? Browse other questions tagged or ask your own question.