News:

SMF 2.1.4 has been released! Take it for a spin! Read more.

Main Menu

https in registration mail, http in notification mail -- Why?

Started by Wolpo, April 24, 2025, 02:35:07 AM

Previous topic - Next topic

Wolpo

Hi,

my 2.1.4 forum (no mods) is intentionally set up to not force SSL. All settings refer to http URLs. The redirection to https is done by my host and it works without problems.

Registration mails and notification mails both use the same hostmaster mail address.

New members get an automatic registration mail with an URL to activate their account. This URL is https. That's OK.

However, notification mails for new posts contain http URLs. That's not OK.

Why are they different? Any ideas?

Thank you.

Sesquipedalian

Quote from: Wolpo on April 24, 2025, 02:35:07 AMWhy are they different? Any ideas?

Because of this:

Quote from: Wolpo on April 24, 2025, 02:35:07 AMmy 2.1.4 forum (no mods) is intentionally set up to not force SSL.

You have created an inconsistent state in your forum's settings. Turn on the setting to force SSL, and this will resolve itself.

In case you are worried about it, be assured that it is perfectly safe to enable that setting and to also have an http to https redirect happening at the server level.
I promise you nothing.

Sesqu... Sesqui... what?
Sesquipedalian, the best word in the English language.

Wolpo

Thank you for your help.

I just noticed it doesn't cause any problems actually. Last night I moved my forum to a new host. On my old host that http thing did cause problems (the redirect out of the URL from the mail program didn't work for some reason). So I expected the problem would remain on the new host. But it works now. Great! I guess the new host has put an htaccess file outside my ftp scope. I see hidden files at various places, but no htaccess file in particular. I don't mind. It works anyway. On the old host I used a self-made htaccess in the domain path, i.e. some levels above the root directory.

The reason I turned the "force SSL" off is this: It was recommended in another thread, where I explained another problem: I got a lot of errors in the forum log, caused by bots that tried to register every 15 minutes with a certain SSL related command or so. If I recall correctly, one of the smf experts recommended to turn the "force SSL" off. And indeed, that solved the problem.

My forum URL in settings.php is an http URL. When I change it to https, my forum looks like a half loaded html page without any reasonable layout or images.

Sesquipedalian

Quote from: Wolpo on April 24, 2025, 04:20:33 AMMy forum URL in settings.php is an http URL. When I change it to https, my forum looks like a half loaded html page without any reasonable layout or images.

It sounds like you need to update the URLs in your theme settings so that they also use https instead of http. You can do that by going to the Themes section of the admin control panel and then editing the settings for each installed theme.
I promise you nothing.

Sesqu... Sesqui... what?
Sesquipedalian, the best word in the English language.


Wolpo

Thank you guys, I'll take a look ...

But I hesitate to make any changes because the forum's running so fast and errorfree now, like never before :-)

Advertisement: