Thread

Our website URL is as follows:
http://www.sacramentochildrensmuseum.org

The site is running on ExpressionEngine v1.6.6

We have two major problems with our site.

1. Internet Explorer is not rendering our site properly.

One issue we’re having is that a Security Warning popup box opens asking if I “want to view only the webpage content that was delivered securely.” Another issue we’re having is that the YouTube video embedded on our home page does not display properly. If you answer “Yes” to the Security Warning popup box then an error message is displayed within the page instead of the video player. If you answer “No” to the Security Warning popup box then a black square is shown instead with a message about needing to upgrade the Adobe Flash Player.

In every other major browser we’ve tested with (Firefox v3.5.18, Opera v10.10 Build 1893, Chrome v10.0.648.204 and Safari v4.0.3) the site works perfectly fine, without either of these issues.

What must we do to make Internet Explorer display our site properly?

2. The backend display is totally messed up.

We just switched web hosting companies and now the backend appears to be messed up. There are no graphics, just text links, and the interface looks completely different than it did previously. Our new webmaster cross-referenced the server system requirements of ExpressionEngine before we made the switch. The new hosting server has everything we need for the site to run so this appears to be a configuration issue or something.

Please see the attached screen shots for more detail on these problems and thanks in advance for your help.

Hi, Sac Kids.

The problem with your site is that you have a mixture of https:// and http:// requirements. You only really need to have your donation page set to use https:// not the whole site.

As far as your backend problem goes, the path to your /themes folder is off, or not all the files got there when moving the site.

When you say IE isn’t displaying the site OK, which version of IE?

1. Is there an easy way to specify that only the Donation page be displayed in SSL mode?

2. As for the themes folder, is there an easy way to get a fresh copy from the 1.6.6 install package? We no longer have access to the old FTP server and just upgrading to the latest stable version of ExpressionEngine isn’t an option right now. Also, where is the path to the themes folder set? I couldn’t find it in the config.php file.

3. IE version I’m testing with is 8.0.7601.17514

We resolved the issue with the backend theme not displaying properly. All that’s left to fix now is the SSL issue.

Here’s what our .htaccess file looks like:

RewriteEngine On
RewriteCond %{SERVER_PORT} 80
RewriteRule ^(.*)$ https://www.sacramentochildrensmuseum.org/$1 [R,L]

RewriteEngine On
RewriteCond $1 ^(member|Forum_Name|code|home|plan_visit|explore|programs|support|about_us|scm|search|P[0-9]{2,8}) [NC]
RewriteRule ^(.*)$ /index.php/$1 [L]

ErrorDocument 401 /includes/errors/401.php
ErrorDocument 404 /includes/errors/404.php

Options -Indexes
# added by jhayhurst to get this enabled
AcceptPathInfo On

# 2011-05-03_16-10-15: MS: Added the following lines to force site to run in SSL mode for the Donations page
#RewriteRule “^/support/donate(/.*)” “https://%{HTTP_HOST}$1” [R=301,L]
#RewriteCond %{SERVER_PORT} !^443$
#RewriteRule http://www.sacramentochildrensmuseum.org/support/donate https://www.sacramentochildrensmuseum.org/support/donate [R=301,L]
#RewriteRule ^support/donate$ https://www.sacramentochildrensmuseum.org/support/donate [R=301,L]

I know the top part of the file is setting the whole site to run in SSL mode. That’s not the long-term solution; it’s how the company that built our site set it up. What needs to happen is that those lines need to be removed and new lines need to be added which require that only ONE page on the site run in SSL mode. The URL that needs to be secure is http://www.sacramentochildrensmuseum.org/support/donate. How do I configure my .htaccess file to accomplish that? All of the attempts at the bottom of the file have failed.

Hi Sac Kids,

You are correct that forcing SSL is done entirely on the server side, and EE is agnostic about that. However we can’t specifically support your .htaccess rules or server configuration; that is outside the realm of EE and should be handled by your host or administrator. If you’d like I can move this over to Community Help for further assistance with configuring the server - just let me know!