FUDforum
Fast Uncompromising Discussions. FUDforum will get your users talking.

Home » FUDforum Development » Bug Reports » Page links still contain HTTP instead of HTTPS
Show: Today's Messages :: Polls :: Message Navigator
Switch to threaded view of this topic Create a new topic Submit Reply
Page links still contain HTTP instead of HTTPS [message #187388] Fri, 17 November 2017 16:50 Go to next message
TonyMarston is currently offline  TonyMarston   United Kingdom
Messages: 32
Registered: April 2006
Location: Surrey, UK
Karma: 0
Member
My entire site now uses HTTPS, and as a security measure I have also enabled HSTS. Unfortunately even though the forum page is called using HTTPS all links within the page still use HTTP, which includes the <base> tag in the header.

This causes a problem with certain browsers like Firefox because when HSTS is enabled each page is forced to be run using HTTPS, and any links in the page which still use HTTP will be ignored. This means that no CSS files will be loaded, which means that the page is displayed incorrectly. If I turn off HSTS then the problem disappears.

Your code should check if the page is being run using the HTTPS protocol, and if so all the internal links should be switched from HTTP to HTTPS.


Tony Marston
Re: Page links still contain HTTP instead of HTTPS [message #187389 is a reply to message #187388] Fri, 17 November 2017 18:36 Go to previous messageGo to next message
GaryM is currently offline  GaryM
Messages: 118
Registered: May 2013
Location: Seattle
Karma: 3
Senior Member
I can't be certain but there is a new release candidate that addresses https. The ability to run forum on both HTTP and HTTPS simultaneously.




Aw: Re: Page links still contain HTTP instead of HTTPS [message #187390 is a reply to message #187389] Sun, 19 November 2017 07:49 Go to previous message
alopezie is currently offline  alopezie   
Messages: 106
Registered: September 2003
Karma: 1
Senior Member
In the RC its said: Zitat:
Ability to run forum on both HTTP and HTTPS simultaneously.
Maybe from the technical point this is possible, but browsers will not like that.
I switched to https already 2 years ago. As far as I remember there was no problem with fudforum as such - only with additional hardcoded http links which I had to change

At that time I learned to use "//" instead of https or http which allow both kind of links


Alopezie.de - das Forum zum Thema Haarausfall

[Updated on: Sun, 19 November 2017 07:50]

Report message to a moderator

  Switch to threaded view of this topic Create a new topic Submit Reply
Previous Topic: Can't backup - admdump
Next Topic: Global Settings Manager
Goto Forum:
  

-=] Back to Top [=-
[ Syndicate this forum (XML) ] [ RSS ]

Current Time: Thu Mar 28 09:19:22 GMT 2024

Total time taken to generate the page: 0.02145 seconds