Simple Machines Community Forum

SMF Development => Feature Requests => Applied or Declined Requests => Topic started by: SimpleJoe on January 13, 2010, 12:32:36 PM

Title: Odd but valid request (for SSL secure forums)
Post by: SimpleJoe on January 13, 2010, 12:32:36 PM
Hello, just thought I'd throw this out there to help anyone who uses a secure forum hosting service with SSL (meaning their forum URL begins with https)

When clicking the Admin tab in a secure forum many browsers give an error about viewing a page with a mix of secure and insecure info -- this appears to be because the news feed from the SMF site comes through a regular http nonsecure URL.

The fix is simple: have this news feed derive from a secure https URL -- then both nonsecure and secure forums would load the page without error. Of course if you don't have access to an SSL site the fix is more daunting.

ps: i realize you can turn off this error message in the browser, but some people get wigged out when they see the error  :P

Title: Re: Odd but valid request (for SSL secure forums)
Post by: Arantor on January 13, 2010, 02:41:21 PM
In the Server Settings page, does it have https or http listed in front of the board URL ?
Title: Re: Odd but valid request (for SSL secure forums)
Post by: SimpleJoe on January 14, 2010, 10:41:47 AM
It has the https -- in looking at the code the insecure links popping up the error appear to be:

<script language="JavaScript" type="text/javascript" src="http://www.simplemachines.org/smf/current-version.js?version=SMF 1.1.11"></script>
      <script language="JavaScript" type="text/javascript" src="http://www.simplemachines.org/smf/latest-news.js?language=english&amp;format=%25B+%25d%2C+%25Y%2C+%25I%3A%25M%3A%25S+%25p"></script>
      
Title: Re: Odd but valid request (for SSL secure forums)
Post by: Arantor on January 14, 2010, 10:47:45 AM
They should be only in the admin panel AFAIK.
Title: Re: Odd but valid request (for SSL secure forums)
Post by: raylu on April 11, 2011, 08:13:45 PM
Bump. This is still an issue. It's important to secure user logins through HTTPS and having a security warning on the admin panel is sort of a downer.
Title: Re: Odd but valid request (for SSL secure forums)
Post by: Arantor on April 11, 2011, 08:19:10 PM
You can secure user logins - just that URL only appears in the admin panel and it cannot be served through HTTPS.