Welcome, Guest. Please login or register.

ShoutBox!

 

Skhilled

Yesterday at 21:09:09
I've upgraded the server...more resources. ;)
 

Ken

Yesterday at 20:57:10
Now that you mention it...  :D
 

Skhilled

Yesterday at 20:47:19
...and, you should notice that the site is much faster.  :o
 

Ken

Yesterday at 20:31:37
Hey Steve.
 

Skhilled

Yesterday at 17:56:10
Re-read the message below...
 

Skhilled

2024-03-31, 15:22:06
Oh yeah, you need to upgrade the site first...
 

Ken

2024-03-30, 09:54:54
Whoops! I forgot that the SMF install here on OFF is out of date!  :'(
 

Ken

2024-03-30, 09:44:48
 Conga-Rats Steve!  :thumbup:
Me gonna install it here just for the fun of it!  :)
 

Skhilled

2024-03-29, 22:15:23
Released!  :D
 

Skhilled

2024-03-24, 09:52:09
It may be released as early as today...if we all agree on it. ;)

Recent Topics

TP Articles


Search in titles
Search in article texts

Author Topic: How To Force HTTP to HTTPS  (Read 16897 times)

0 Members and 1 Guest are viewing this topic.

Offline Ken

  • Vietnam Era Veteran
  • Administrator
  • *
  • Posts: 11667
  • Gender: Male
  • View Gallery
Re: How To Force HTTP to HTTPS
« Reply #30 on: May 06, 2017, 08:04:53 PM »
I have started my own image hosting site Ken, and its ssl secure too, more coming later about that.

Sounds good Less, be sure to keep us posted.

Steve, maybe I just need to remove my sig.

EDIT: Steve, is my sig image showing as posted here for you?
https://www.ourfamilyforum.org/FamilyForum/gallery/0/64-060517191358.png
"Not all who wander are lost."-Tolkien
Yesterday When I was Young.

Offline Lesmond

Re: How To Force HTTP to HTTPS
« Reply #31 on: May 06, 2017, 08:08:54 PM »
Tinypotal doesn't have a secure site Ken, so you will have to host the image here, but you can still link it to TP

Offline Ken

  • Vietnam Era Veteran
  • Administrator
  • *
  • Posts: 11667
  • Gender: Male
  • View Gallery
Re: How To Force HTTP to HTTPS
« Reply #32 on: May 06, 2017, 08:10:36 PM »
Tinypotal doesn't have a secure site Ken, so you will have to host the image here, but you can still link it to TP

Thanks Les... just made that change.  :thumbup:
https://www.ourfamilyforum.org/FamilyForum/gallery/0/64-060517191358.png
"Not all who wander are lost."-Tolkien
Yesterday When I was Young.

Offline Skhilled (OP)

  • Administrator
  • *
  • Posts: 8990
  • Gender: Male
  • All of my passwords are protected by amnesia...
  • View Gallery
    • Buildz Hosting
Re: How To Force HTTP to HTTPS
« Reply #33 on: May 07, 2017, 06:47:08 PM »
Les and I found out the links to the gallery will not be secured if used elsewhere on the forum for some reason. I believe it is cause there are links in the gallery admin that use http. Mainly, the smfhacks link and the twitter link. Smfhacks.org is not secured and the link to twitter in the settings uses http instead of https.

I uploaded both of our avatars to the avy folder on the server and now some pages show as secured like Help.

EDIT: I just uploaded your avy too and it works. The forum main page shows as secured.
« Last Edit: May 07, 2017, 07:19:49 PM by Skhilled »

Offline Ken

  • Vietnam Era Veteran
  • Administrator
  • *
  • Posts: 11667
  • Gender: Male
  • View Gallery
Re: How To Force HTTP to HTTPS
« Reply #34 on: May 07, 2017, 09:09:12 PM »
Nice work on the avatars.  :thumbup:

Looks like our main culprit now is just the gallery.
"Not all who wander are lost."-Tolkien
Yesterday When I was Young.

Offline Skhilled (OP)

  • Administrator
  • *
  • Posts: 8990
  • Gender: Male
  • All of my passwords are protected by amnesia...
  • View Gallery
    • Buildz Hosting
Re: How To Force HTTP to HTTPS
« Reply #35 on: May 07, 2017, 09:16:45 PM »
I just finished regenerating the thumbnails and now everything looks secured to me except the gallery page itself!

Offline Ken

  • Vietnam Era Veteran
  • Administrator
  • *
  • Posts: 11667
  • Gender: Male
  • View Gallery
Re: How To Force HTTP to HTTPS
« Reply #36 on: May 07, 2017, 09:42:51 PM »
This process seems to be a bit of a can of worms because of the external links that we have on our sites, especially externally linked images.
"Not all who wander are lost."-Tolkien
Yesterday When I was Young.

Offline Skhilled (OP)

  • Administrator
  • *
  • Posts: 8990
  • Gender: Male
  • All of my passwords are protected by amnesia...
  • View Gallery
    • Buildz Hosting
Re: How To Force HTTP to HTTPS
« Reply #37 on: May 07, 2017, 09:46:46 PM »
Yup! I try not to use external images and try as much as I can to host them myself if only not to hotlink (use other site's bandwidth).

Offline Ken

  • Vietnam Era Veteran
  • Administrator
  • *
  • Posts: 11667
  • Gender: Male
  • View Gallery
Re: How To Force HTTP to HTTPS
« Reply #38 on: May 07, 2017, 09:47:18 PM »
Just did a little surfing through the site using the SMF Default theme and in that theme all of the pages show as unsecured.  :o
"Not all who wander are lost."-Tolkien
Yesterday When I was Young.

Offline Ken

  • Vietnam Era Veteran
  • Administrator
  • *
  • Posts: 11667
  • Gender: Male
  • View Gallery
Re: How To Force HTTP to HTTPS
« Reply #39 on: May 07, 2017, 09:48:26 PM »
gotta get off now, my show 'Elementary' is coming on!  laughing7
"Not all who wander are lost."-Tolkien
Yesterday When I was Young.

Offline Skhilled (OP)

  • Administrator
  • *
  • Posts: 8990
  • Gender: Male
  • All of my passwords are protected by amnesia...
  • View Gallery
    • Buildz Hosting
Re: How To Force HTTP to HTTPS
« Reply #40 on: May 07, 2017, 09:50:53 PM »
I did that yesterday and noticed the same thing. I checked it thinking the theme was the culprit. There are images in it that are unsecured I think but didn't get a change to check them yet...

Offline Skhilled (OP)

  • Administrator
  • *
  • Posts: 8990
  • Gender: Male
  • All of my passwords are protected by amnesia...
  • View Gallery
    • Buildz Hosting
Re: How To Force HTTP to HTTPS
« Reply #41 on: May 10, 2017, 08:20:30 AM »
I've found a little known setting that may also help. In the admin, under Cookies and Sessions enable:

Quote
Force cookies to be secure
(This only applies if you are using HTTPS - don't use otherwise!)

I've enabled it here and on my forum.

Offline Ken

  • Vietnam Era Veteran
  • Administrator
  • *
  • Posts: 11667
  • Gender: Male
  • View Gallery
Re: How To Force HTTP to HTTPS
« Reply #42 on: May 10, 2017, 10:39:50 AM »
Good find.  :thumbup:

Now we just have to monitor to see how it works.
"Not all who wander are lost."-Tolkien
Yesterday When I was Young.

Offline Ken

  • Vietnam Era Veteran
  • Administrator
  • *
  • Posts: 11667
  • Gender: Male
  • View Gallery
Re: How To Force HTTP to HTTPS
« Reply #43 on: May 10, 2017, 10:42:28 AM »
The Gallery shows as unsecured.

EDIT: but individual pictures show as secured.  :o
NOTE: this was while in the WorkDesk theme.
« Last Edit: May 10, 2017, 10:49:17 AM by Ken »
"Not all who wander are lost."-Tolkien
Yesterday When I was Young.

Offline Ken

  • Vietnam Era Veteran
  • Administrator
  • *
  • Posts: 11667
  • Gender: Male
  • View Gallery
Re: How To Force HTTP to HTTPS
« Reply #44 on: May 10, 2017, 10:47:31 AM »
And the SMF Default theme still shows unsecured in all pages.
"Not all who wander are lost."-Tolkien
Yesterday When I was Young.