Simple Machines Community Forum

SMF Support => SMF 2.0.x Support => Topic started by: sakis11111 on September 19, 2019, 04:43:20 AM

Title: mixed content
Post by: sakis11111 on September 19, 2019, 04:43:20 AM
hi there guys, after installing SSL, I get a warming message from browsers that I have mixed content. According to whynotpadlock, the message is this:

A script with an insecure url of "http://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.1/jquery.min.js" was loaded on line: 31 of https://gg-goldengreek.net/smf1/index.php.

I searched with filezilla all SMF files and I didnt found anything that includes this text, so I cant add an "s" to http.

Any help would be highly appreciated, thank you
Title: Re: mixed content
Post by: Arantor on September 19, 2019, 04:46:45 AM
That's got to be a mod. Core SMF does not use jQuery at all, but I have no idea which mod it might be.

Also not really a bug report.
Title: Re: mixed content
Post by: sakis11111 on September 19, 2019, 05:19:01 AM
Really sorry that I post my problem here arantor. Maybe I had to put it somewhere else. You are free to move it if you like.

Yes, I have read other posts of you that its not smf but a mod. But I have 40 mods installed!

So, if I want to see if its a mod, do I have to search the code of the mods? I have seen that smf gives me the ability to see inside mods's files
Title: Re: mixed content
Post by: sirfpsycho on September 19, 2019, 05:27:03 AM
Open your website in chrome and press ctrl+Shift+J and check which is using http and
you need to find the culprit page and edit it with https. or use  // instead of http.


If you are using cloudflare then just go to SSL/TLS tab and Enable Automatic HTTPS Rewrites.

+++ If you are unable to find, please provide me you website address where you get this mixed content error. I will tell you in which portion error is coming.
Title: Re: mixed content
Post by: @rjen on September 19, 2019, 05:29:38 AM
I am guessing...

<!-- OneAll.com / Social Login for SMF //-->
Title: Re: mixed content
Post by: sakis11111 on September 19, 2019, 05:33:07 AM
Quote from: sirfpsycho on September 19, 2019, 05:27:03 AM
Open your website in chrome and press ctrl+Shift+J and check which is using http and
you need to find the culprit page and edit it with https. or use  // instead of http.


If you are using cloudflare then just go to SSL/TLS tab and Enable Automatic HTTPS Rewrites.

i did that sir but I cant find the file anywhere. The inspect element returned this result:

<script type="text/javascript" src="http://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.1/jquery.min.js"></script>

My page is this one

https://gg-goldengreek.net/smf1/index.php

Title: Re: mixed content
Post by: sakis11111 on September 19, 2019, 05:34:08 AM
Quote from: @rjen on September 19, 2019, 05:29:38 AM
I am guessing...

<!-- OneAll.com / Social Login for SMF //-->

i thought the same and I removed oneall but problem persists rj
Title: Re: mixed content
Post by: @rjen on September 19, 2019, 05:46:52 AM
Quote from: sakis11111 on September 19, 2019, 05:34:08 AM
Quote from: @rjen on September 19, 2019, 05:29:38 AM
I am guessing...

<!-- OneAll.com / Social Login for SMF //-->

i thought the same and I removed oneall but problem persists rj

Then something did not uninstall quite right... I am still seeing this chunk of code in your site...


<!-- OneAll.com / Social Login for SMF //-->
<script type="text/javascript" src="//gg-goldengreek.api.oneall.com/socialize/library.js"></script>
GG supports "A Billion Lives"
<script type="text/javascript" src="http://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.1/jquery.min.js"></script>
<script type="text/javascript">
$(document).ready(function() {

var oTwitter = $('a[href*="twitter.com"][href*="/status"]');
if (oTwitter.length > 0) {
oTwitter.each(function() {
var oHolder = $(this);
var sStr = $(this).attr('href');
sStr = sStr.replace(/\/+$/, "");
sStr = sStr.substr(sStr.lastIndexOf('/') + 1);
$.getJSON("https://gg-goldengreek.net/smf1/tweet-cache.php?id=" + sStr, function(data) {
oHolder.before(data.html);
});
});
}

});
</script>
<!-- OneAll.com / Social Login for SMF //-->
Title: Re: mixed content
Post by: sakis11111 on September 19, 2019, 05:52:33 AM
Quote from: @rjen on September 19, 2019, 05:46:52 AM
Quote from: sakis11111 on September 19, 2019, 05:34:08 AM
Quote from: @rjen on September 19, 2019, 05:29:38 AM
I am guessing...

<!-- OneAll.com / Social Login for SMF //-->

i thought the same and I removed oneall but problem persists rj

Then something did not uninstall quite right... I am still seeing this chunk of code in your site...


<!-- OneAll.com / Social Login for SMF //-->
<script type="text/javascript" src="//gg-goldengreek.api.oneall.com/socialize/library.js"></script>
GG supports "A Billion Lives"
<script type="text/javascript" src="http://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.1/jquery.min.js"></script>
<script type="text/javascript">
$(document).ready(function() {

var oTwitter = $('a[href*="twitter.com"][href*="/status"]');
if (oTwitter.length > 0) {
oTwitter.each(function() {
var oHolder = $(this);
var sStr = $(this).attr('href');
sStr = sStr.replace(/\/+$/, "");
sStr = sStr.substr(sStr.lastIndexOf('/') + 1);
$.getJSON("https://gg-goldengreek.net/smf1/tweet-cache.php?id=" + sStr, function(data) {
oHolder.before(data.html);
});
});
}

});
</script>
<!-- OneAll.com / Social Login for SMF //-->


thank you very much rj for your effort!
so, what do I have to do now? Do I have to remove this code? If yes, how do I do that? Or do I have to uninstall and install again the oneall mod?

Thank you
Title: Re: mixed content
Post by: @rjen on September 19, 2019, 05:58:06 AM
No clue, you should ask in de MOD support thread I guess...

https://www.simplemachines.org/community/index.php?topic=496394.0

In general re-installing and uninstalling Mods that are not uninstalled correctly is dangerous and I would not attempt that without making full backups of your forum first...
Title: Re: mixed content
Post by: sakis11111 on September 19, 2019, 06:01:59 AM
Quote from: @rjen on September 19, 2019, 05:58:06 AM
No clue, you should ask in de MOD support thread I guess...

https://www.simplemachines.org/community/index.php?topic=496394.0

In general re-installing and uninstalling Mods that are not uninstalled correctly is dangerous and I would not attempt that without making full backups of your forum first...

thank you rj

Ok, I will wait for sirf to see if he comes up with a solution
Title: Re: mixed content
Post by: sakis11111 on September 19, 2019, 07:14:37 AM
By the way, firefox says that these trackers and cookies are blocked

connect.facebook.net
staticxx.facebook.com
Title: Re: mixed content
Post by: sakis11111 on September 19, 2019, 02:35:24 PM
Any clue guys?
Title: Re: mixed content
Post by: @rjen on September 19, 2019, 02:36:51 PM
Seriously, you should ask in the support thread I pointed you to...
Title: Re: mixed content
Post by: sakis11111 on September 19, 2019, 03:08:50 PM
this is the oneall thread rj. It seems that you are sure that its the oneall mod that brings issues, right? Ok, I will try with them, thanks again
Title: Re: mixed content
Post by: Arantor on September 19, 2019, 03:18:59 PM
What you should also do is restore the SMF copyright.
Title: Re: mixed content
Post by: sakis11111 on September 19, 2019, 03:36:58 PM
Because I am running higher SMF version than 2.01 I thought that I am allowed to remove all SMF copyright information in the footer arantor.
Title: Re: mixed content
Post by: Illori on September 19, 2019, 03:41:07 PM
you can, but that means we can deny you support as a result.
Title: Re: mixed content
Post by: Arantor on September 19, 2019, 03:57:09 PM
Quote from: sakis11111 on September 19, 2019, 03:36:58 PM
Because I am running higher SMF version than 2.01 I thought that I am allowed to remove all SMF copyright information in the footer arantor.

I'm well aware of what you are and are not allowed to do, better than most; I'm literally one of the people involved in the wrangling that made it possible, for better and worse. However... not giving credit to someone else's hard work is pretty disrespectful.
Title: Re: mixed content
Post by: sakis11111 on September 19, 2019, 04:14:36 PM
agree arantor. You see it in the right way.

Can I add a global footer that will be like this: Powered by SIMPLE MACHINES FORUMS?
Title: Re: mixed content
Post by: Illori on September 19, 2019, 04:17:51 PM
no if you want support you need to have the official copyright as it is on this forum, that includes the links.

the only part that can be removed is the version.
Title: Re: mixed content
Post by: sakis11111 on September 20, 2019, 06:19:25 AM
I will post here my solution in case someone else has the same problem. I inspect element via my browser (opera, but you can do it with any browser) and I saw the problematic file (the one with http instead of https). Then I downloaded the entire site to my local drive and searched all files via notepad++ for the word that was included on htttp problematic link. In 20 seconds Notepad++ found the that the problematic word was on load.php file. I replaced the http with https on the problematic row of load.php via filezilla and everything is ok
Title: Re: mixed content
Post by: sakis11111 on September 20, 2019, 06:21:10 AM
By the way, I cant remember how to put the official copyright back to the bottom of my forum. Maybe illori can help me on this
Title: Re: mixed content
Post by: Illori on September 20, 2019, 07:22:01 AM
we don't provide instructions on how to put it back as you had to know how because you removed it.
Title: Re: mixed content
Post by: sakis11111 on September 20, 2019, 07:52:37 AM
its ok illori, lets leave things as they are for now