Fixing insecure items (using SSL)

Hello,

I am using SSL for my entire site. I need help finding where in the theme I need to make the appropriate adjustments to resolve some issues. Here are the first two:

Mixed Content: The page at ‘https://tribyoot.org/’ was loaded over HTTPS, but requested an insecure resource ‘http://fonts.googleapis.com/css?family=Amarante’. This request has been blocked; the content must be served over HTTPS.
(index):95 Mixed Content: The page at ‘https://tribyoot.org/’ was loaded over HTTPS, but requested an insecure stylesheet ‘http://fonts.googleapis.com/css?family=Amarante’. This request has been blocked; the content must be served over HTTPS.

I hope you can guide me to where in the theme files I need to make the adjustments to secure these.

Thanks.

Philip

Hello Lucian,

I have found out that the problem was with a plugin (for the Google Font issue).

Thanks for your help.

Philip

Hello,

I have a question. Using Chrome dev tools, I am getting this error in Console:

Mixed Content: The page at ‘https://tribyoot.org/15248/2-year-old-survives-decapitation/’ was loaded over HTTPS, but requested an insecure stylesheet ‘http://tribyoot.org/Tribyoot/wp-content/plugins/oiopub-direct/images/style/output.css’. This request has been blocked; the content must be served over HTTPS.

I have contacted the plugin developer and he cannot find where, in the plugin, the problem could be originating. However, what are the chances that because the Ad area of the theme is using the code from the plugin, that the theme is actually causing this to request an http instead of an https for this plugin (javascript, css, etc.)

Philip

Thanks Lucian,

Another issues has come to my attention. I recently updated my server PHP version to 5.4 (latest available in CPanel) and ran into some rendering issues with Newspaper.

I had to downgrade to 5.3. Which version of PHP is Tagdiv using? Are there some compatibility issues that TagDiv is working on?

Thanks.

Philip

These were the errors I was receiving:

This is my Firefox error

The connection was reset

The connection to the server was reset while the page was loading.

The site could be temporarily unavailable or too busy. Try again in a few moments.
If you are unable to load any pages, check your computer’s network connection.
If your computer or network is protected by a firewall or proxy, make sure that Firefox is permitted to access the Web.

This is from Chrome:

No data received

Reload

Hide details

Unable to load the webpage because the server sent no data.

Error code: ERR_EMPTY_RESPONSE

This is Opera (when attempting to access WP Admin)

No data received

Unable to load the webpage because the server sent no data.

This is IE:

This page can’t be displayed

Make sure the web address https://tribyoot.org is correct.
Look for the page with your search engine.
Refresh the page in a few minutes

I don’t get anywhere with Safari either.

Interestingly, I have no problem accessing CatalystCrowdfunding.org or EconEmail.com on the same server in the same version of PHP.

Now that I’ve downgraded PHP, all sites load properly, but I wanted to let you know my experience in case it would help you at TagDiv.

Philip

We’re running PHP Version 5.4.22 on our server and have been using Newspaper the past year without any issues related to PHP. Also running one site with Newspaper with https with zero issues.

It sounds more like a system setup issue on the backend as far as resources, memory allocation, caching, or possible DNS issue; and not the PHP “version” itself being the issue with the theme/WordPress.

While not common in the past, if you’re using one of the tricky *new* setups with SSL and a shared IP, that can cause some intermittent things vs dedicated IP address.

Seems like you should have the overall system checked, as not being able to access your WordPress login is generally a sign something more notable is wrong.

Hello,

I am having problems with SSL and fonts as well. Why No Packlock says the problem is with the following:

Insecure URL: http://fonts.googleapis.com/css?family=Roboto+Condensed%3A400italic%2C700italic%2C700%2C400%7COpen+Sans%3A400italic%2C600italic%2C700italic%2C400%2C700%2C600&ver=4.2.2

Insecure URL: http://fonts.gstatic.com/s/opensans/v13/cJZKeOuBrn4kERxqtaUH3aCWcynf_cDxXwCLxiixG1c.ttf
Found in: http://fonts.googleapis.com/css?family=Roboto+Condensed%3A400italic%2C700italic%2C700%2C400%7COpen+Sans%3A400italic%2C600italic%2C700italic%2C400%2C700%2C600&ver=4.2.2

Insecure URL: http://fonts.gstatic.com/s/opensans/v13/MTP_ySUJH_bn48VBG8sNSonF5uFdDttMLvmWuJdhhgs.ttf
Found in: http://fonts.googleapis.com/css?family=Roboto+Condensed%3A400italic%2C700italic%2C700%2C400%7COpen+Sans%3A400italic%2C600italic%2C700italic%2C400%2C700%2C600&ver=4.2.2

Insecure URL: http://fonts.gstatic.com/s/opensans/v13/k3k702ZOKiLJc3WVjuplzInF5uFdDttMLvmWuJdhhgs.ttf
Found in: http://fonts.googleapis.com/css?family=Roboto+Condensed%3A400italic%2C700italic%2C700%2C400%7COpen+Sans%3A400italic%2C600italic%2C700italic%2C400%2C700%2C600&ver=4.2.2

Insecure URL: http://fonts.gstatic.com/s/opensans/v13/xjAJXh38I15wypJXxuGMBp0EAVxt0G0biEntp43Qt6E.ttf
Found in: http://fonts.googleapis.com/css?family=Roboto+Condensed%3A400italic%2C700italic%2C700%2C400%7COpen+Sans%3A400italic%2C600italic%2C700italic%2C400%2C700%2C600&ver=4.2.2

Insecure URL: http://fonts.gstatic.com/s/opensans/v13/PRmiXeptR36kaC0GEAetxi8cqLH4MEiSE0ROcU-qHOA.ttf
Found in: http://fonts.googleapis.com/css?family=Roboto+Condensed%3A400italic%2C700italic%2C700%2C400%7COpen+Sans%3A400italic%2C600italic%2C700italic%2C400%2C700%2C600&ver=4.2.2

Insecure URL: http://fonts.gstatic.com/s/opensans/v13/PRmiXeptR36kaC0GEAetxp_TkvowlIOtbR7ePgFOpF4.ttf
Found in: http://fonts.googleapis.com/css?family=Roboto+Condensed%3A400italic%2C700italic%2C700%2C400%7COpen+Sans%3A400italic%2C600italic%2C700italic%2C400%2C700%2C600&ver=4.2.2

Insecure URL: http://fonts.gstatic.com/s/robotocondensed/v13/Zd2E9abXLFGSr9G3YK2MsDR-eWpsHSw83BRsAQElGgc.ttf
Found in: http://fonts.googleapis.com/css?family=Roboto+Condensed%3A400italic%2C700italic%2C700%2C400%7COpen+Sans%3A400italic%2C600italic%2C700italic%2C400%2C700%2C600&ver=4.2.2

Insecure URL: http://fonts.gstatic.com/s/robotocondensed/v13/b9QBgL0iMZfDSpmcXcE8nDokq8qT6AIiNJ07Vf_NrVA.ttf
Found in: http://fonts.googleapis.com/css?family=Roboto+Condensed%3A400italic%2C700italic%2C700%2C400%7COpen+Sans%3A400italic%2C600italic%2C700italic%2C400%2C700%2C600&ver=4.2.2

Insecure URL: http://fonts.gstatic.com/s/robotocondensed/v13/BP5K8ZAJv9qEbmuFp8RpJdNyc1nIn01s4QPT2l20KA4.ttf
Found in: http://fonts.googleapis.com/css?family=Roboto+Condensed%3A400italic%2C700italic%2C700%2C400%7COpen+Sans%3A400italic%2C600italic%2C700italic%2C400%2C700%2C600&ver=4.2.2

Insecure URL: http://fonts.gstatic.com/s/robotocondensed/v13/mg0cGfGRUERshzBlvqxeAIvse0WFWMXD6DWBLcV41iQ.ttf
Found in: http://fonts.googleapis.com/css?family=Roboto+Condensed%3A400italic%2C700italic%2C700%2C400%7COpen+Sans%3A400italic%2C600italic%2C700italic%2C400%2C700%2C600&ver=4.2.2

Thank you.

Pekman…
Link to example post with error?
What version of theme being used?

Hi, I am using https://www.whynopadlock.com/ to check. My website is https://brandingforum.org.

I just bought the theme last week and am using version 6.0.

I am hosting on WPEngine. I was using a different theme before, and setup the Newspaper theme in the WPEngine staging area. everything was working fine but when I made the staging live I have all these errors. It seems that the Search function is now also producing an insecure call on line # 499.

I have already changed the site URLs in WordPress to https:// and also in wp-config.php.

Thank you.

I’m now also getting an error for Google Maps:

The Google Maps API server rejected your request. Requests to this API must be over SSL.

Hello, I re-uploaded the theme. It is when I turned all the plug-ins off and then on again that everything was suddenly fixed. Thank you!