Mixed Content (HTTP resources on HTTPS page)

How to Fix It

Update all resource URLs to use HTTPS:

1. Find all HTTP URLs in your HTML:
   grep -r 'http://' /var/www/html/

2. Replace with https:// or protocol-relative URLs (//):
   OLD: <script src="http://cdn.example.com/lib.js"></script>
   NEW: <script src="https://cdn.example.com/lib.js"></script>

3. Use relative URLs where possible:
   OLD: <img src="http://yoursite.com/img/logo.png">
   NEW: <img src="/img/logo.png">

4. Add CSP upgrade-insecure-requests directive:
   Content-Security-Policy: upgrade-insecure-requests

5. Update your database if URLs are stored there:
   UPDATE posts SET content = REPLACE(content, 'http://', 'https://');