Website Security: Fixing SSL Mixed Content Errors

What are mixed content errors?

Mixed content errors are reported by web browsers when an SSL (Secure Socket Layer) certificate is installed and active for the website and domain, but content is still being loaded over the HTTP protocol.

When an SSL certificate is installed and configured for a website the protocol of the website is set to HTTPS. This indicates to the server that the data should be sent securely using the SSL to encrypt the data before it is sent to the server, and then to have it decrypted once it reaches the server. Sometimes, however, a website is setup to use the HTTPS protocol, but some assets on the website (such as images, or external assets such as libraries) may still be loaded over HTTP. If this is the case, the browser will display what’s known as a mixed content error.

Here’s an example of how Google Chrome reports a mixed content error:

Example: Mixed Content SSL Error

To generate this error, I simply setup the BellinghamWP.com website’s logo to load over HTTP instead of HTTPS.

Fixing Mixed Content Errors

Understanding what needs to be done to fix a mixed content error is very simple. As described above, the issues is that an asset is loading over HTTP instead of HTTPS. So, to put it succinctly, you’ll need to update the asset in question to load over the HTTPS protocol by changing it’s URL.

As you can see from the screenshot above, Google Chrome reports that there is an issue by displaying the message “Your connection to this site is not fully secure.” We can see that the website is attempting to load over the HTTPS protocol, and that the SSL Certificate is valid, but what we don’t know yet is what exactly is causing the mixed content issue. To figure this out, we’ll want to use the Google Chrome Developer Tools window.

Open Google Chrome Developer Tools:

Google Chrome Developer Tools

Following the steps in the image above, you’ll (1) click on the menu button within the Google Chrome browser. This button is represented by three vertical dots and is located in the upper-right of the browser. Next, you’ll want to (2) expand the More tools menu, and finally (3) click on Developer Tools.

If you’ve followed the steps above correctly, you should see something like the image below:

Developer Tools Mixed Content Error

You’ll need to make sure you’re viewing the Console tab by clicking directly on it to make it active.

As you can see in the screenshot above, the following message displays:

Mixed Content: The page at ‘https://www.bellinghamwp.com/photoshop/adobe-photoshop-opens-on-wrong-monitor/’ was loaded over HTTPS, but requested an insecure image ‘http://www.bellinghamwp.com/wp-content/uploads/2014/04/wordpress-services-bellingham.png’. This content should also be served over HTTPS.

In this example, the message tells us which file is responsible for the mixed content error which is being reported. To remedy this issue, you’ll simply need to locate where that specific file is within your website and update the protocol from HTTP to HTTPS.

Once you’ve made the change you can check to see if it was successful by reloading the website / page in question and checking to see if a mixed content error is still being detected. After fixing the issue in my example above, this is what the Google Chrome browser is displaying:

Google Chrome Connection is Secure

WordPress Mixed Content Errors

WordPress themes and plugins may have files which are added by default using the HTTP protocol. In some cases, editing the theme / plugin, or adding a filter, may be your only options for remedying the mixed content issue.

In some cases, such as is common practice with a website’s logo, the image may have been added through the WordPress customizer or through a theme options panel. If this is the case, I recommend reviewing the location where the image is indicated to see if the theme allows you to indicate the full image URL. If so, you should be able to simply add the missing S to the HTTP protocol which already exists for the image. Some theme’s however, will automatically indicate the HTTP protocol and not allow you to directly edit the URL.

Another point of consideration would be to utilize a plugin which attempts to force the HTTPS protocol for all assets loaded on the website. I’ve had success with this, but in some cases it’s also failed. You’ll have to test this out in your particular use case to see if it does the trick.

Adobe Photoshop: Opens On Wrong Monitor

adobe-photoshop-opening-on-wrong-monitor

Have Adobe Photoshop Open on Desired Monitor:

  1. Open Adobe Photoshop.
  2. Drag the Photoshop window to the monitor you would like it to open on when launched.
  3. Make certain the window is not maximized.
  4. Close Adobe Photoshop.
  5. TEST: The next time you open Adobe Photoshop it should open in your desired monitor.

TL;DR: Really? Five steps too much?: Adobe Photoshop remembers to open on the last monitor it was closed on WITHOUT being maximized to the screen of said monitor.
Tested on Windows 10 with Adobe Photoshop 2015.5

If you found this post helpful please let me know by leaving a comment either on this post, on Facebook, or on Twitter. Likewise, if this didn’t’ work for you please share that as well. I’ve posted the steps first, instead of burying them in the post’s body, as I don’t want my audience to have to dig for the resolution.
Continue reading…

WordPress: Customize the CSS for specific pages or posts

wordpress-css-targeting-pages-and-posts-cover

WordPress is a very intelligently built content management system (CMS). So intelligent, in fact, that the developers knew WordPress users might have a need to modify specific pages independent of their other pages or posts. To facilitate this, WordPress provides an intuitive CSS class and ID structure which we can make use of.

The <body> HTML section of each page will contain a unique class which will allow you to target the specific page or post. Continue reading below for more detailed information.
Continue reading…

Internet Marketing Basics: 5 Methods For Online Success

internet-marketing-basics-5-methods-for-online-success

In this day and age, most business owners are aware that having a website is crucial for the success of their business. This recognition is evident in the droves of new business websites being published on the internet on a daily basis. These new websites compete for search engine rankings in Google and Bing like all others. As such, the benefit of simply having a business website is being diluted amidst the myriad newcomers.

Internet Marketing, as well as Digital Marketing, offer opportunities for businesses to outperform their rival’s efforts to outrank them in the search engines or to gain a larger market share through online advertising and strategic business asset utilization.

Now, perhaps more than ever, understanding your business’ audience and the internet marketing opportunities surrounding it is equally important. In 2016, marketing your business online is an effective, affordable option.

Here are the top 5 essential methods your internet marketing plan needs to grow your business.

Continue reading…

WordPress Vulnerability: All In One SEO Plugin version 2.3.7 and earlier

WordPress Plugin Vulnerability

A vulnerability has been recently uncovered in the All In One SEO WordPress plugin, versions 2.3.7 and earlier. If your WordPress website makes use of the All In One SEO plugin it is recommended that you or your website’s administrator take a backup of your website’s database and then update the plugin to version 2.3.8.

All Bellingham WP managed WordPress websites have been updated and secured against this vulnerability.

Is your website secure?

Bellingham WP provides website hosting and management from $33 monthly.
Continue reading…

Improve Your Business SEO: Blogging with Long Tail Keywords

Improve Your Business SEO: Blogging with Long Tail Keywords

If you own a local service business maintaining a blog on your website is a great way to establish yourself as an authority, provide value to your audience, and keep visitors coming back to your site. But there’s another aspect of blogging on a WordPress website that you cannot afford to ignore: search engine optimization, more commonly referred to by its acronym: SEO.

As a website management company, SEO is one of the services that we offer to help you drive leads and make sales. As we covered in our blog post about small business SEO, organic traffic from Google is one of the best ways to help potential customers find you. SEO has many components, some more technical than others. One of the keys to SEO success is targeted content that integrates the proper keywords. This might sound daunting, but at its core, it’s actually pretty simple: posts need to be written to include what your potential customers are searching for.

Optimizing Your Blog Posts

Blog post optimization starts with keyword research. The goal of SEO for small local businesses is to help people find your business when they’re looking for the services you offer. By integrating common search terms into your posts, along with your service locations, you or your website management company can increase the likelihood that potential customers will find your site.

Continue reading…