Jump to content

Archived

This topic is now archived and is closed to further replies.

Mort-lemur

Useful Security Addition

Recommended Posts

Not sure if this is the right place to post this, but...

 

Due to recent articles in the press etc about internet security, I was looking for a way to reasure my site visitors that my websites were safe to use (other than displaying the SSL seal, which I do on the relevant SSL pages.

 

Discovered that AVG provide a widget that links to a report of your site safety, and it can be found here: http://www.avgthreatlabs.com/free-tools-for-webmasters/widget/safety-badge/

 

Then I decided that I wanted this displayed on each page - so Ideally placed in the header, before my "Create Account" link.

 

Also changed the code to read https instead of http to prevent secure / non secure conflicts. So the code for me looks like this:

 

   <li><div id="avgthreatlabs_safetybadge_small"><noscript><a href="https://www.avgthreatlabs.com?utm_source=Safety_Widget&utm_medium=NA&utm_campaign=SSBW" target="_blank">AVG Threatlabs</a></noscript></div><script language="javascript" src="https://api.avgthreatlabs.com/static/js/security_s.js"></script></li>

 

Seems to work well and not too dominating on the site.

 

Screenshot attached - any comments or views please?


Now running on a fully modded, Mobile Friendly 2.3.4 Store with the Excellent MTS installed - See my profile for the mods installed ..... So much thanks for all the help given along the way by forum members.

Share this post


Link to post
Share on other sites

I tried your code on my test site. Clicking on the image resulted in an Insecure Page warning from Firefox. Apparently HTTPS is not supported properly. Using the code from the site does not produce any errors. I'll probably just hide this on SSL pages.

 

Thanks for the useful tip.

 

Regards

Jim


See my profile for a list of my addons and ways to get support.

Share this post


Link to post
Share on other sites

@@kymation Thanks for the heads up Jim, how would you hide this on the SSL pages?

 

Thanks


Now running on a fully modded, Mobile Friendly 2.3.4 Store with the Excellent MTS installed - See my profile for the mods installed ..... So much thanks for all the help given along the way by forum members.

Share this post


Link to post
Share on other sites

<?php    if ($request_type == 'NONSSL') {  ?>
<div id="avgthreatlabs_safetybadge"><noscript><a href="http://www.avgthreatlabs.com?utm_source=Safety_Widget&utm_medium=NA&utm_campaign=MSBW" target="_blank">AVG Threatlabs</a></noscript></div><script language="javascript" src="https://api.avgthreatlabs.com/static/js/security.js"></script>
<?php  } ?>

 

That's the larger icon that I used at the bottom of the left column. Substitute the code for the smaller one if you prefer it.

 

Regards

Jim


See my profile for a list of my addons and ways to get support.

Share this post


Link to post
Share on other sites

Possibly:

 

<li><div id="avgthreatlabs_safetybadge_small"><noscript><a href="http://www.avgthreatlabs.com?utm_source=Safety_Widget&utm_medium=NA&utm_campaign=SSBW" target="_blank">AVG Threatlabs</a></noscript></div><script language="javascript" src="//api.avgthreatlabs.com/static/js/security_s.js"></script></li>

 

Link to the Non https version and pull the js depending on where in your site (https or not) the person is.

 

Possibly useful to be coded as a box module, like (eg) bm_information.php etc


This is a signature that appears on all my posts.  
IF YOU MAKE A POST REQUESTING HELP...please state the exact version
of osCommerce that you are using. THANKS

 
Get the latest Responsive osCommerce CE (community edition) here

Share this post


Link to post
Share on other sites

Another one here:

 

If you have submitted your site to Norton Safe Web ( http://safeweb.norton.com/help/site_owners )then you can add a logo and link to their report on your site like this:

 

   <li> <a href="http://safeweb.norton.com/report/show?url=yoursite.com" target="_blank">
<img width="73" height="24" border="0" alt="Norton Safe Web Status" src="/images/norton_safeweb.png" title="Norton Safe Web Status"></li>

Obviously changing yoursite.com to the actual name of your site.

 

Also please find your own image for the norton_safeweb.png file and upload to your images directory.


Now running on a fully modded, Mobile Friendly 2.3.4 Store with the Excellent MTS installed - See my profile for the mods installed ..... So much thanks for all the help given along the way by forum members.

Share this post


Link to post
Share on other sites

Interesting observation, sometimes the AVG widgit shows, sometimes it does not, whereas the Norton widgit shows all the time - anybody else noticed this anomaly ?

 

Same for me on 3 sites

 

Thanks


Now running on a fully modded, Mobile Friendly 2.3.4 Store with the Excellent MTS installed - See my profile for the mods installed ..... So much thanks for all the help given along the way by forum members.

Share this post


Link to post
Share on other sites

Not sure if this is the right place to post this, but...

 

Due to recent articles in the press etc about internet security, I was looking for a way to reasure my site visitors that my websites were safe to use (other than displaying the SSL seal, which I do on the relevant SSL pages.

 

Discovered that AVG provide a widget that links to a report of your site safety, and it can be found here: http://www.avgthreatlabs.com/free-tools-for-webmasters/widget/safety-badge/

 

Then I decided that I wanted this displayed on each page - so Ideally placed in the header, before my "Create Account" link.

 

Also changed the code to read https instead of http to prevent secure / non secure conflicts. So the code for me looks like this:

 

    <li><div id="avgthreatlabs_safetybadge_small"><noscript><a href="https://www.avgthreatlabs.com?utm_source=Safety_Widget&utm_medium=NA&utm_campaign=SSBW" target="_blank">AVG Threatlabs</a></noscript></div><script language="javascript" src="https://api.avgthreatlabs.com/static/js/security_s.js"></script></li>
Seems to work well and not too dominating on the site.

 

Screenshot attached - any comments or views please?

 

What file did you install this on? Thanks.

Share this post


Link to post
Share on other sites

@@wlsnoops it is installed in includes/header.php but that is to display it in the header, if you wanted it elsewhere then you would have to add the code where you wanted the icon to display.


Now running on a fully modded, Mobile Friendly 2.3.4 Store with the Excellent MTS installed - See my profile for the mods installed ..... So much thanks for all the help given along the way by forum members.

Share this post


Link to post
Share on other sites

@@wlsnoops it is installed in includes/header.php but that is to display it in the header, if you wanted it elsewhere then you would have to add the code where you wanted the icon to display.

Great. Thanks a bunch. Have a great weekend.

Share this post


Link to post
Share on other sites

×