Security Warning after checkout and Returning from PayPal

[Ric M]

Hi,

I’m using the latest version of your eStore Plugin on a new install of WP.

I’m using a Buy Now button that takes the customer straight to PayPal.

After they complete the purchase, and click the “return to merchant” button, Firefox 10.0.2 shows a “Security Warning: Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection…” Are you sure you want to continue?”

I suspect this is the IPN info being sent back to my site, but I’m worried that my customers will panic and click cancel.

Is this warning normal, or is it a sign that I’ve set things up wrong?

Thanks

[admin]

This is a standard warning that browser shows the user when you send data from a HTTPS site to a Non HTTPS site. In this case as you’re coming from paypal (secure – https) to yourdomain (non secure – http).

Note that you don’t need a SSL certificate but if you don’t want your customers to see that warning you will need to install a SSL certificate for your domain which will make your domain URLs secure (https) and the browser won’t show this warning anymore.

You can also enable Auto Return in your PayPal profile which will automatically redirect the customer to your “Thank You” page after a payment. When PayPal auto redirects to your site your customer’s won’t see that warning.

More discussion on this topic here:

https://support.tipsandtricks-hq.com/forums/topic/using-ssl-options-ideas-and-what-not

[Sev]

Hi. I’ve got eStore and I too am getting the security warning when leaving Paypal and going back to my website. I’ve tried both setting the Thankyou page as an https page and also setting up in PayPal for it to redirect to this page specifically – but I’m still getting the security message. Any thing else I could try?

Many thanks.

[wzp]

if you don’t want your customers to see that warning you will need to install a SSL certificate for your domain which will make your domain URLs secure (https) and the browser won’t show this warning anymore.

You have an SSL certificate, correctly installed?

Please share a link to your thank you page so we can see if the HTTPS is working correctly on that page.

[Sev]

Hi. This is the url for the thank-you page:

[https://www.genekeys.com/thank-you/]

the https seems to be working – but there may be more to it than I understand!

[wzp]

One of the images on the Thank You page is using a non secure (regular HTTP) URL. The image of the blue “Gene Keys” book.

[wpCommerce]

@Sev, This is the exact error:

The page at 'https://www.genekeys.com/thank-you/' was loaded over HTTPS, but ran insecure content from 'http://freegeoip.net/json/?callback=checkAmazonLinks': this content should also be loaded over HTTPS. (amazon_linker.min.js?v=1.9:1)

That error is coming from the “amazon_linker.min.js” file and causing the issue (I am guessing it is coming from another plugin which is not HTTPS compatible). As soon as you fix that, your Page will be fully HTTPS compatible and you won’t see that other warning anymore.

[Sev]

Great! Thanks so much to both of you for explaining this. Much appreciated.

[Author]

Posts