Odd but valid request (for SSL secure forums)

Started by SimpleJoe, January 13, 2010, 12:32:36 PM

Previous topic - Next topic

SimpleJoe

Hello, just thought I'd throw this out there to help anyone who uses a secure forum hosting service with SSL (meaning their forum URL begins with https)

When clicking the Admin tab in a secure forum many browsers give an error about viewing a page with a mix of secure and insecure info -- this appears to be because the news feed from the SMF site comes through a regular http nonsecure URL.

The fix is simple: have this news feed derive from a secure https URL -- then both nonsecure and secure forums would load the page without error. Of course if you don't have access to an SSL site the fix is more daunting.

ps: i realize you can turn off this error message in the browser, but some people get wigged out when they see the error  :P

Hosting Simple Machines since YaBB -- One of the first SMF Forum Hosting providers with Chat and FTP for the inner developer in us all.

Arantor

In the Server Settings page, does it have https or http listed in front of the board URL ?

SimpleJoe

It has the https -- in looking at the code the insecure links popping up the error appear to be:

<script language="JavaScript" type="text/javascript" src="http://www.simplemachines.org/smf/current-version.js?version=SMF 1.1.11"></script>
      <script language="JavaScript" type="text/javascript" src="http://www.simplemachines.org/smf/latest-news.js?language=english&amp;format=%25B+%25d%2C+%25Y%2C+%25I%3A%25M%3A%25S+%25p"></script>
      
Hosting Simple Machines since YaBB -- One of the first SMF Forum Hosting providers with Chat and FTP for the inner developer in us all.

Arantor

They should be only in the admin panel AFAIK.

raylu

Bump. This is still an issue. It's important to secure user logins through HTTPS and having a security warning on the admin panel is sort of a downer.

Arantor

You can secure user logins - just that URL only appears in the admin panel and it cannot be served through HTTPS.

Advertisement: