News:

Want to get involved in developing SMF, then why not lend a hand on our github!

Main Menu

https in registration mail, http in notification mail -- Why?

Started by Wolpo, Yesterday at 02:35:07 AM

Previous topic - Next topic

Wolpo

Hi,

my 2.1.4 forum (no mods) is intentionally set up to not force SSL. All settings refer to http URLs. The redirection to https is done by my host and it works without problems.

Registration mails and notification mails both use the same hostmaster mail address.

New members get an automatic registration mail with an URL to activate their account. This URL is https. That's OK.

However, notification mails for new posts contain http URLs. That's not OK.

Why are they different? Any ideas?

Thank you.

Sesquipedalian

Quote from: Wolpo on Yesterday at 02:35:07 AMWhy are they different? Any ideas?

Because of this:

Quote from: Wolpo on Yesterday at 02:35:07 AMmy 2.1.4 forum (no mods) is intentionally set up to not force SSL.

You have created an inconsistent state in your forum's settings. Turn on the setting to force SSL, and this will resolve itself.

In case you are worried about it, be assured that it is perfectly safe to enable that setting and to also have an http to https redirect happening at the server level.
I promise you nothing.

Sesqu... Sesqui... what?
Sesquipedalian, the best word in the English language.

Wolpo

Thank you for your help.

I just noticed it doesn't cause any problems actually. Last night I moved my forum to a new host. On my old host that http thing did cause problems (the redirect out of the URL from the mail program didn't work for some reason). So I expected the problem would remain on the new host. But it works now. Great! I guess the new host has put an htaccess file outside my ftp scope. I see hidden files at various places, but no htaccess file in particular. I don't mind. It works anyway. On the old host I used a self-made htaccess in the domain path, i.e. some levels above the root directory.

The reason I turned the "force SSL" off is this: It was recommended in another thread, where I explained another problem: I got a lot of errors in the forum log, caused by bots that tried to register every 15 minutes with a certain SSL related command or so. If I recall correctly, one of the smf experts recommended to turn the "force SSL" off. And indeed, that solved the problem.

My forum URL in settings.php is an http URL. When I change it to https, my forum looks like a half loaded html page without any reasonable layout or images.

Advertisement: