The main problem is that Facebook runs in HTTPS, a secure protocol and for the contact importer to work your contact importer files must also be secure in order to be compatible with a Facebook.
Now like many of you I setup my site in HTTPS using an SSL certificate, this made my whole site secure and I was able to setup the contact importer without a problem, however running your whole site in HTTPS does provide a solution for the Facebook contact importer, but then gives other issues for other parts of the site.
So after a lot of searching and testing I came up with a simple solution that provides a secure URL for the Contact importer but leaves your site runnning using standard http protocol.
So lets start from the top. First you need to setup your SSL certificate. Depending on your hosting provider, this may be a free option through your Cpanel or you may have to contact your hosting to set it up for you. I was able to setup my SSL via Host Gator Cpanel with a couple of clicks.
Once your SSL is setup you need to access your .htaccess file located in the main folder of your oxwall site. You will need to download the file to your computer and open it up with an editing program.
On line 2 of the .htaccess file you will find the code - RewriteEngine On
You must post the following code underneath this line.
RewriteCond %{HTTPS} off
RewriteCond %{REQUEST_URI} /contactimporter/fbcanvas
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R,L]
Once you have done this, upload the .htaccess file back to your server.
Redirect to you site, nothing should have changed. Now redirect to - yoursite.com/contactimporter/fbcanvas - you should see the url change to HTTPS.
Now you need to setup your Facebook app.
1. You should create an application here:
https://developers.facebook.com/apps/
2. Once application is created you should do the following:
- Fill in the 'App Domain' field. Type your website domain, I have included on my domain, but you can write it without.
-Scroll down where it says 'Website', click on it and paste your site URL (with http: and www if applicable) into the Site URL field.
-Scroll down where it says 'App on Facebook', click on it and fill in the 'Canvas URL'. It should look like http://yourdomain.com/contactimporter/fbcanvas/ where yourdomain.com is your site URL
-The secure canvas URL is the same as above, except you must include https at the beginning. https://yourdomain.com/contactimporter/fbcanvas
- Now click "save changes" at the bottom of the page.
Pay attention to the App ID and App Secret (marked with red), they will be used in the step 3.
This is not the perfect solution, however it works.
