Ssl certificate but still not secure

[elham.mah]

I added SSL certificate free version to my website Notebookofell.com but it still says NOT SECURE!!

[sdayman]

Mixed Content. (Edited attachment to show full URL of HTTP requests…and they’re quite unconventional)

Mixed Content

What is mixed content? Mixed content is when your site is loading over HTTPS, however some images / scripts / resources are being loaded insecurely over HTTP. Your browser may give a notification about it when visiting the site, such as: [image] or [image] If you see this error, you should enable: [image] in the SSL/TLS app [Screenshot%20from%202019-08-27%2013-47-34] of your Cloudflare dashboard which can help with some issues. If you still have some mixed content on your site, you wil…

[elham.mah]

https://notebookofell.com/

now it is broken? what should I do?

[sdayman]

It looks the same to me, including the Mixed Content errors.

Do you have a .htaccess file you can edit? This is a line I add to .htaccess to fix stubborn Mixed Content errors:
Header always set Content-Security-Policy: upgrade-insecure-requests

[elham.mah]

Sorry, I’m a noob, what is htaccess file? I only have 2 posts and 2 images uploaded from my mac!

[sdayman]

If you have file access to your website files, there is usually a .htaccess file in the same directory as your WordPress configuration files.

Also…in the SSL/TLS settings section of the Cloudflare Dashboard, you probably have “Always Use HTTPS” enabled. “Automatic HTTPS Rewrites” should also be enabled.

Any particular reason you have your security setting set to “Under Attack Mode”? It can drive visitors away from your site because of the wait.

[elham.mah]

Under the attack mode… i thoughit is good for security:) ok I disable it!

[elham.mah]

hi, I cannot find the link to disable under the attack mode, can you help please

[elham.mah]

I found it done