English

বাংলা
हिन्दी

English

বাংলা
हिन्दी

Appearance

Mixed content warnings ​

Symptoms ​

  • The browser shows a warning or no padlock on a page that uses HTTPS.
  • Images, styles or scripts are missing, or the page looks broken.
  • The browser console shows "Mixed Content" messages.

Common causes ​

  • Old http:// addresses are saved in pages, posts, theme settings or the database.
  • A theme or plugin has a fixed http:// address for a file.
  • The application does not know that the visitor uses HTTPS, so it creates http:// links.
  • A file comes from another website that does not support HTTPS.

Safe initial checks ​

  1. Open the page, press F12 and open the Console tab. The messages list the http:// files.
  2. Check whether the problem is on every page or only on some pages.
  3. Make a backup of the site and database before you change content. See Website backups.

Step-by-step solutions ​

  1. Turn on a Cloudflare helper. In Cloudflare open SSL/TLS, then Edge Certificates, and turn on Automatic HTTPS Rewrites. This fixes many simple cases.
  2. Fix the site address. For WordPress set both addresses to https:// as shown in WordPress behind Cloudflare. For Laravel set APP_URL as shown in Laravel behind Cloudflare.
  3. Replace old addresses. Change http://example.com to https://example.com in your content. In WordPress you can use a search and replace plugin on the database.
  4. Fix theme and plugin files. Replace fixed http:// addresses in theme settings or ask the theme or plugin author for an update.
  5. External files. Use an https:// address for the file, or upload the file to your own site.
  6. Clear caches. Clear the plugin cache and use Purge Cache in Cloudflare, then test in a private window.

How to confirm the issue is fixed ​

  • The padlock shows on all pages and the console has no Mixed Content messages.
  • Images, styles and scripts load normally.

When to contact support ​

Contact support if the warnings continue after the steps above, or if you cannot find where the http:// address comes from. Contact [SUPPORT_CONTACT].

Information to include in a support ticket ​

  • The page address and a screenshot of the console messages.
  • The name of your CMS, theme and caching plugins.
  • Whether you use Cloudflare and the SSL/TLS mode.

Last reviewed ​

2026-10-29