Security warning with Firefox when returning to website from Paypal

pennypitstop

A friend has been remotely testing the paypal function on my new ecommerce website and everything worked perfectly using Internet Explorer and Google Chrome.We both got the relevant emails etc and money change accounts etc.

The transaction/emails etc also worked fine for Mozilla Firefox apart from one issue:
After the transaction was completed in paypal and the customer (my friend) was again offered the option to return to website, this message popped up: (note, it did not happen with IE or Chrome)

SECURITY WARNING
Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.

are you sure you want to continue sending this information?

I would certainly not be too happy seeing this if I was a customer and am wondering why it is happening and why only on Firefox?

Any ideas/suggestions? anyone come across this before, thanks.

goldenhoarde

Try this on the return page

http://www.whynopadlock.com/

it appears that one element of the https page is infact http so you get this message

http://www.zen-cart.com/forum/showthread.php?t=56892

or

http://www.google.ie/search?q=SECURITY+WARNING+Although+this+page+is+encrypted%2C+the+information+you+have+entered+is+to+be+sent+over+an+unencrypted+connection+and+could+easily+be+read+by+a+third+party.&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-GB:official&client=firefox-a#hl=en&client=firefox-a&rls=org.mozilla:en-GB%3Aofficial&sclient=psy-ab&q=Although+this+page+is+encrypted%2C+the+information+you+have+entered+is+to+be+sent+over+an+unencrypted+connection+and+could+easily+be+read+by+a+third+party.&oq=Although+this+page+is+encrypted%2C+the+information+you+have+entered+is+to+be+sent+over+an+unencrypted+connection+and+could+easily+be+read+by+a+third+party.&aq=f&aqi=&aql=&gs_sm=12&gs_upl=29742l29742l0l32729l1l0l0l0l0l0l0l0ll0l0&gs_l=serp.12...29742l29742l0l32730l1l0l0l0l0l0l0l0ll0l0.llsin&pbx=1&bav=on.2,or.r_gc.r_pw.r_qf.,cf.osb&fp=1860ce8e62ca1a35&biw=1440&bih=756

pennypitstop

I have trawled through tons of forum posts about this and the problem seems to be around for years without any definitive solution.

Does anyone here have first hand experience of this on their own website, and if so how did they solve it?

Cork Skate

pennypitstop wrote: »

I have trawled through tons of forum posts about this and the problem seems to be around for years without any definitive solution.

Does anyone here have first hand experience of this on their own website, and if so how did they solve it?

Still looking, and no solution found.

cgarvey

Is your return URL a secure (HTTPS) one?
If it is, are there any elements on the page that are using regular HTTP, instead of HTTPS (e.g. AdWords, stat counters, social media buttons, faebook plugins, etc.)?