Questions tagged [secure]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
3
votes
1answer
26 views

What is the use of [_secure => true] in controller redirect path argument in Magento 2

Anyone can explain to me what is the use of [_secure => true] in controller redirect path arguments in Magento 2.
4
votes
3answers
191 views

PHPSESSID: Session Cookie Does Not Contain the “Secure” Attribute

In m1 we could just override isSecure from Mage_Core_Model_Cookie model, method: public function isSecure() { return $this->_getRequest()->isSecure(); } How can we accomplish this in m2?
1
vote
0answers
52 views

How can I upload a video and make it secure that no one else can play that video even if they know the link of the video?

Teachers will upload video and students will only be able to watch and download it's tutorial if they pay or purchase that product. It can have multiple attachments like video streaming and PDF to ...
0
votes
1answer
12 views

Started with “Not secure” warning, then when logging into admin stuck on “my account” page to reset password, can't make any further actions

My magento page which was recently secure, has given me a warning through chrome that it is not secure. In an attempt to check on the status of my account info to see if there was anything I could do ...
2
votes
1answer
1k views

Magento 2 : How to set secure cookie OR HTTP ONLY FLAG SET

As per my security checking and testing in Magento 2, I see that secure cookie or HTTP only flag not set on the Magento 2. For the security reason, we need the cookie to be secure. Can someone please ...
3
votes
2answers
221 views

Moving site to https killed my traffic, suggestions?

I've got to deal with a Magento 1.x site that has been run on unsecure http for over a decade. Just reading that, you're immediately thinking it's time to move it to https, right? Well the trouble ...
0
votes
1answer
33 views

SSL Issue Non secure links still reachable by HTTPS

Currently we only require our checkout to be SSL secure. However if we manually type any URL from product page, catalog pages and home page with https:// infront of the domain secure pages are loading....
0
votes
1answer
426 views

How To Test SSL On Development Server Without SSL Certificate [duplicate]

I'm testing some code that changes a link to use the secure base URL, but my development server does not have an SSL certificate. I'm trying to fake it and have so far been unsuccessful. I have links ...
1
vote
1answer
2k views

form post - getURL secure (HTTPS / SSL)

There is a form post, it sends data without secure URL (HTTP): <form id="answer_form_<?php echo $id;?>" class="form" method="post" action="<?php echo Mage::getUrl('productquestions/...
0
votes
1answer
38 views

How to remove authentication massages in magento website which is hacked by someone

I have a Magento website. Someone add adds on my homepage in header section. When I click on my websites menus then other links are opening there. How can I remove it and how to secure in future ...
5
votes
1answer
531 views

Magento 2.1 - Sitemap XML Doesn't change to HTTPS

Use Secure URLs on Storefront = Yes Use Secure URLs in Admin = Yes Secure Base URL = starts with HTTPS Why does my sitemap not start each link with https?
0
votes
1answer
39 views

Can I used SSL certificate on my testing/staging developement server?

I have to install SSL certificate on my domain but before that I want to test it on my testing domain which have same so I can find out unknown error. Is it possible to use it on testing domain ...
0
votes
2answers
443 views

Magento secure URL directive?

I'm using {{store url=""}} to build the URL for a CMS block. The block is later loaded within the HEAD tag to include a rel="stylesheet" link pointing to a CSS file. My problem is that the store ...
2
votes
1answer
114 views

IsSecureMode di.xml frontend / backend don't work

Magento 2.0.10 and PHP 5.6.27 i have declare a etc\frontend\di.xlm en frondend whitch <type name="Jbpevasion\Cartebleu\Block\Info"> <arguments> <argument name="data" xsi:...
0
votes
2answers
67 views

Do I need an SSL certificate with Magento 2.1.0?

We never had the new generation of Magento until now. And on all the previous versions (1.x.x) we ALWAYS needed to buy and have an SSL certificate installed (otherwise browsers would throw these scary ...
0
votes
2answers
543 views

How to return a secure url?

I have got an issue with the search-bar on my magento website which keeps returning an unsecure url. Be aware I am a bit of a noob when it comes to php. The url gets called in this form tag: <form ...
2
votes
1answer
610 views

Magento 2: Custom Form Security

I have created custom "Contact Us" form. Put Magento default Captcha as well. On server side i'm using if (!$this->_formKeyValidator->validate($this->getRequest())) { return $this->...
0
votes
1answer
100 views

array('_forced_secure' => true) in every page

In every page of my magento shop there is a message array('_forced_secure' => true)
0
votes
1answer
2k views

Can't set “Use Secure URLs in Frontend”

In Magento 1.9.2.4, when I go to System > Configuration > Web > Secure and set Use Secure URLs in Frontend to Yes, when I click Save, the field is set back to No. Before clicking save: After ...
0
votes
1answer
448 views

Magento secure url to delete and edit product in the cart

in code/core/Mage/Checkout/Block/Cart/Item/Renderer.php i changed getConfigureUrl and getDeleteUrl by adding _secure public function getConfigureUrl() { return $this->getUrl( ...
1
vote
1answer
5k views

SSL Mixed Content issue in secure pages [duplicate]

I have set the secure_base_url to httpsand also have set Use Secure URLs in Frontend to yes. Still when i navigate the site i get warnings such as Mixed Content: The page at 'https://mysite/customer/...
0
votes
1answer
1k views

Magento 1.9.2 PayPal 3D Secure Setup Error - “this card has failed validation and cannot be used”

I am experiencing difficulty in setting up 3D Secure Card Validation feature in Magento 1.9.2 in system/configuration/payment_methods and system/configuration/payment_systems. The thread on this ...
-1
votes
1answer
28 views

How can i validate that my module must worked only allowed domain

I want to validate my module only work with allowed domain in magento2
1
vote
1answer
150 views

Set HTTPS-only for secure pages - No data received error

We only need to set HTTPS for secure pages: Account pages, login pages, checkout and shopping cart pages. We are using it as in the following image. Is everything fine in the image? Because ...
1
vote
1answer
553 views

Exclude specific frontend URL from https://

I have a Magento website and have enabled https:// across the whole site by configuring the unsecure Base URL. The site also uses the following API URL which CANNOT be https, but because of the config ...
2
votes
2answers
2k views

redirect https to http for catalog & Product pages

we are using https for secure pages. we can see http for unsecure pages - products and catalog pages. we can see https for secure pages - My account, Login pages. But if we manually type https:// ...
2
votes
2answers
2k views

HTTPS with Cloudfare

I'm trying make my magento webshop work through HTTPS. I already have an SSL certificate. This is what I've done: In the backend (System > Configuration > Web > Secure Tab) I've changed the Base ...
3
votes
1answer
849 views

Non-secure links on secure pages causing warnings (Parts of this page are not secure)

My website on the checkout page is not sending everything as HTTPS, causing Firefox to give me the yellow padlock with the "Parts of this page are not secure" warning. Chrome also warns that "This ...
1
vote
1answer
26 views

Make one defined category secure

How can I force one defined category page to use https secure instead of using unsecre url. I am using Magento Version 1.6.2.0 Thanks for help.
2
votes
1answer
552 views

Current base_url (secure/unsecure?) in block

I want to make some links in a CMS static block. I use one of the base_url variables... for example: <a href="{{config path="web/unsecure/base_url"}}customer/account">Account</a> I can ...
-2
votes
1answer
1k views

magento ajax add to cart button will not work with secure https [closed]

I have enabled secure cart in our magento site[htttp = > https] . After that, add to cart buttons are not working. My theme has custom ajax add-to-cart button. If I manually enter product detail page ...
0
votes
0answers
1k views

Add to cart ajax buttons not working with secure(https) cart

we added secure url to entire site by follwoing this link : site not loading properly after adding ssl certificate than we added secure url https to cart page by following link : http://magento....
0
votes
0answers
30 views

How to ensure that our website is not vulnerable to the issue SUPEE-6482 after installing the patches? [duplicate]

I've installed the patch SUPEE-6482, but still appear a window like this: Whether it means the patch is not installed correctly? How to ensure that our website/Magento is secure from the patch issue? ...
1
vote
0answers
122 views

Changed Secure and Unsecure to HTTPS - Google Webmaster Tools now showing me Soft 404's

We wanted our entire website to be SSL secure so we changed secure and unsecure settings to HTTPS. That works fine. Google webmaster tools is now seeing some soft 404's that I'd like to fix. But ...
1
vote
1answer
1k views

No message block on checkout cart page

I have my checkout cart page running on https. When I am applying any coupon or removing, it is not showing any message to the user. When I am using non secure checkout page, then Magento is showing ...
1
vote
0answers
57 views

How to apply cache tags to template file?

I am trying to implement a cache key to automatically change when URL is changed from secure (https://) to unsecure (http://) or vice versa but I am missing something out that is causing the ...
2
votes
2answers
706 views

Why not using a protocol relative Base Url

Using https https://example.com/ for Shops gets more important and there are a lot of good reasons to force it for secure URLs in Magento. But, why use http http://example.com for unsecure URLs as ...
0
votes
1answer
1k views

Customer can not login in frontend with secure url…after ssl configuration

I configured SSl in magento. login url and checkout url.... But its login is not working.... My setting are In system web option Auto-redirect to Base URL----> NO Use Secure URLs in Frontend-----&...
2
votes
2answers
37 views

Issues combining secure_url with noaction

I have a custom module with frontend actions that I want to be secure. So in my module's config.xml file I put this: <secure_url> <mymodule_controller>/mymodule/controller</...
1
vote
1answer
2k views

Magento Admin panel will not fully load Edit Categories due to AJAX call to a non secure endpoint

We have a Magento site that was copied over from an existing Magento site we have, so all products, setting, etc are simply copied to a new domain. This was done months ago but I am just now trying ...
1
vote
1answer
39 views

How Secure Are User Made PHP Files? [closed]

I am currently part of a team trying to build an e-commerce platform with Magento, and we also happen to need a way for the site to interact with a mobile app we are developing in parallel. We ran ...
1
vote
2answers
403 views

getSkinUrl with _forced_secure not loading via https after clearing cache

I have this code as the src in an img tag. $this->getSkinUrl('images/mobile-logo.png',array('_forced_secure'=>true)); If I clear the cache, then immediately load a secure page, it loads with ...
2
votes
3answers
2k views

Using SSL in Unsecured URL

I've inherited a running, trading website and am trying to work through numerous issues with it, amongst them, that the secure site is pulling through a lot of unsecured content and links, seemingly ...
1
vote
1answer
1k views

Captcha called on HTTP only

I have a Magento site that has recently begun to stop showing the captcha forms. Also, some browsers (Safari) are refusing to show that my checkout page is secure because, even though the rest of the ...
2
votes
2answers
4k views

Secure store url with store code in CMS page or block

How can I get secure store url with store code in CMS page or block? e.g. https://www.mydomain.com/storecode/ should be generated..
10
votes
5answers
29k views

How to get base secure url without index.php

I want to to get base-secure-url without index.php. I enabled index.php for some reason. Now I have a PHP file at Magento root directory, and I want to call Magento secure pages from this PHP file. ...
0
votes
2answers
1k views

Which Url is used for API connection in magento

i am trying to connect magento api connection using soap client and am confusing about what url use for api connection.Is magento used Either used Secure Url Or Unsecure url. My Web Url setting like ...
1
vote
1answer
667 views

Website Forces HTTPs, but “Use Secure URLs in Frontend” is set to No

I am running the magento in a directory, and this is how the .htaccess file looks like. Any tips on how to disable https? This is a test website and I do not have an SSL cert installed, so I need to ...
1
vote
0answers
623 views

One Time Password for Frontend user login [closed]

Can I configure the Magento frontend user login to incorporate a One Time password via a text message on the registered phone number? If yes what are the areas i need to factor in?
14
votes
4answers
45k views

SSL secure entire Frontend (all pages)

I run a store selling digital products and for me it is very important to show customers that my ENTIRE store is safe. Also Google have started to reward sites ussing SSL. http://...