HTTP and HTTPS at Oxwall Software Forum

tammy harris Feb 28 '16

first step is for oxwall to revert there stuff up from 1.6

we are at 1.8.1 and still there fup is there and nothing done

theres just to much that needs fixing

#41

tammy harris Feb 28 '16

but it will never ever be fixed
nothing will ever be fixed
as the oxwall team members like sandar
http://www.oxwall.org/user/cst

are charging ppl to make plugins to fix there fu ups

i want my money back every dam cent so i can go some where else

#42

Unus Feb 28 '16

Tammy, some pretty bad stuff going on here according to you. Did you try to contact the team and make your points heard? Any answers yet?

#43

tammy harris Feb 28 '16

no in 3 years not one answer to anything
i have give them proof of scams but they just let it happen and let ppl loose there money

and i seen the chat with sandar about one of the ssl fixes brian posted
the answer from him was for few hundred dollars i can make u a plugin that does brians fix

the answer should of been cool il test it and if it works we will add it to the core

The Forum post is edited by tammy harris Feb 28 '16

#44

tammy harris Feb 28 '16

bad lol every where u look is a mess
problems everywhere

#45

tammy harris Feb 28 '16

just try and report a problem here and see how much fun that is

try and post on a oxwall plugin forum about problem or things now work right
you post just gets moved to custom code mod so any new ppl looking at plugins dont see the problems with it
hahahahaha

i can go on for days and days about the mess everywhere here

#46

tammy harris Feb 28 '16

when some one posts about a oxwall plugin
i reply with i would not use that plugin as it has problems blar blar
and all my posts get deleted

how about uservoce what a joke that is
oxwall just keeps deleting posts there
hahahahahah

#47

tammy harris Feb 28 '16

and when ross get back tomorrow all these post will be removed as well

#48

Unus Feb 28 '16

I made screenshots to be sure if they are deleted I will have them ;-)

#49

Unus Feb 28 '16

Quote from Tammy ssl is not a big factor in rankings
but yes it does help

have you tryed run site full https and use htacess to turn it of on pages like newsfeed

or blogs

RewriteCond %{HTTPS} on
RewriteCond %{REQUEST_URI} /blog
RewriteRule (.*) http://%{HTTP_HOST}%{REQUEST_URI} [R,L]

to do this it's nonsense and defeats the purpose of https

cause once you switched from https to http you expose yourself to spoofing attacks and basically the whole https you've been using till that moment was useless.

this is not a good idea and I urge everyone to not do it.

the only way this would work is if the pages for which you turn off https and visit them via http do not require authentication therefor do not send over the wire your authentication ticket (header).

The Forum post is edited by Unus Feb 28 '16

#50

tammy harris Feb 28 '16

Yes we know is not good but there's not much choice as oxwall won't fix it

#51

tammy harris Feb 28 '16

Quote from Unus I made screenshots to be sure if they are deleted I will have them ;-)

LOL now they won't just to prove me wrong lol

#52

JoshWho Feb 28 '16

I have full ssl enabled on my site. I did not change anything in my .htaccess the only change i made was in the config file and I just changed the http to https in the site url field.

#53

Unus Feb 29 '16

JoshWho may I ask where did you guy your ssl certificate?

#54

JoshWho Feb 29 '16

Quote from Unus JoshWho may I ask where did you guy your ssl certificate?

I am currently using cloudflares free ssl but I also buy them from comodo there cheap like 4.99 a year

#55

JoshWho Feb 29 '16

like the one I have on my free hosting site https://www.freejoshwho.website/ it uses the https://secure.comodo.com/...ite/&x=6&y=5

and it is really cheap.

#56

Unus Mar 2 '16

thanks Josh, do you know anything about the letsencrypt guys? they offer ssl certs for free.

#57

Unus Mar 2 '16

on this next question, maybe an oxwall dev can answer?

I have witched fully to https however, looking with FF in debug window I can see this message

Loading mixed (insecure) display content "http://__mydomain__.com/...es/theme_image_6.png" on a secure page"

which determines FF to say the site insecure...

in what source should I look and change this url to https?

also, I assume there's more places like this; lucky me I am using just a few plugins (I am not using the blog, or video, and more others). so I would like to know how to find the places where the http links to images I should change to https.

thanks

#58

Team

ross Mar 2 '16

Unus, please take a look at Taissa's reply: http://www.oxwall.org/forum/topic/33103?page=1

#59

JoshWho Mar 2 '16

Quote from Unus thanks Josh, do you know anything about the letsencrypt guys? they offer ssl certs for free.

Lets encrypt is a very good service but you need to install their software onto your server for it to work. It is a really great free ssl system. If you are on shared hosting you wont be able to use it. Only for dedicated and vps servers.

The Forum post is edited by JoshWho Mar 2 '16

#60

Oxwall Software

Please sign in

We build. You grow.

Start a social network, a fan-site, an education project with oxwall - free opensource community software

HTTP and HTTPS | Forum