Unsecure Redirect Warning

madmanlear · #1 (**permalink**) 08-03-2007, 05:25 PM

Hello All,

On one of my sites we use a php header to redirect a user to an unsecured "thank you" page after checking out. Since a recent move to a new server this redirect is now generating a very user-unfriendly warning in IE6 every time it takes place. The code is precisely the same, only the server has changed. Has anyone heard of this being a server-specific problem, or a way around it?

(It happens in IE6, by the way, but not IE7)

Thanks!

studiokraft · #2 (**permalink**) 08-03-2007, 09:16 PM

Hello,

Could you give us some more information, such as what the "very user-unfriendly warning" is, and what server OS you are using?

It sounds like IE is popping up the "You are about to leave a secure site" message, but that shouldn't have anything to do with the server...

madmanlear · #3 (**permalink**) 08-04-2007, 11:28 AM

Certainly. The message reads:

"You are about to be redirected to a connection that is not secure.

"The information that you are sending to the current site might be retransmitted to a nonsecure site. Do you wish to continue?"

The server operates on Linux.

studiokraft · #4 (**permalink**) 08-04-2007, 02:16 PM

This seems to be a browser issue, I can't think of anything on the server that would trigger this error.

Having said that, perhaps the move to the new server, and the installation of the SSL certificate on that new server, has changed whatever info IE6 had stored about the security of the site and is now triggering the error where it didn't before?

The best way around it is to have your confirmation/error pages on the secure connection as well, with a continue button explaining that the user is about the leave the secured site so that they understand (maybe) what is happening when the IE6 dialog box pops up.

nottheusual1 · #5 (**permalink**) 08-06-2007, 06:54 PM

Why not just have a secure thank-you page? Most elegant answer.

khurramali · #6 (**permalink**) 08-06-2007, 11:49 PM

browser issue, ie trying to act smart and just trying to make you believe they are doing their best to protect you from all the bad stuff on the internet. One of which by the way is Redirecting a user to another page or website.

I agree with Nottheusual1, do that.

Clint1 · #7 (**permalink**) 08-08-2007, 08:02 AM

Quote:

Originally Posted by studiokraft

This seems to be a browser issue, I can't think of anything on the server that would trigger this error.

Having said that, perhaps the move to the new server, and the installation of the SSL certificate on that new server, has changed whatever info IE6 had stored about the security of the site and is now triggering the error where it didn't before?

The best way around it is to have your confirmation/error pages on the secure connection as well, with a continue button explaining that the user is about the leave the secured site so that they understand (maybe) what is happening when the IE6 dialog box pops up.

Yes, this just the way IE settings are set. There's an option to "warn if being redirected" regarding secure/non-secure pages and if that is unchecked you won't get the warning.

mattyw · #8 (**permalink**) 08-08-2007, 07:49 PM

That message is generated if the page you are has a certificate, and the user is being redirected to a page that does not have a certificate. It will even come up with that message if the page is secure, but an image or images on it are in a directory without a certificate.

M. A. Woodman
Welcome to the wedding website Thinkwedding.com!