We build. You grow.

Get best community software here

Start a social network, a fan-site, an education project with oxwall - free opensource community software

http and https | Forum

Morena Milani
Morena Milani Jan 29 '16
I have to edit config.php because my website functions both with https with http because external links do not connect it to turn http to https 
JoshWho
JoshWho Jan 29 '16
This is a known bug and Is being fixed in the next update.  http://www.oxwall.org/forum/topic/44576
JoshWho
JoshWho Jan 29 '16
yeah but then any http link posted will become broken and that is what the problem is. 


Like for example if you had a rss news feed from google and will grab the syndication fro the news but give you a link with https in it. when the user clicks it it shows either a broken page because the website doesn't have ssl or it shows a unsecure connection warning. 


They need to only force oxwall site links to be ssl and not every link on the site.

The Forum post is edited by JoshWho Jan 29 '16
JoshWho
JoshWho Jan 29 '16
Well Google ranks sites higher for ssl and all websites  later on in this year will be forced to go ssl or google will not pay attention to them any more.  Oxwall is getting behind on this. All other cms platforms already implemented this already last year.
JoshWho
JoshWho Jan 29 '16
Well my site for example when clicking a external link redirects it to a new window. If the link was kept http it wouldn't cause a insecure connection. 
tammy harris
tammy harris Jan 29 '16

Quote from Chris_W I'm not sure how they went about fixing it, as any site on SSL that contains a page with a link to a non SSL source will show insecure content in the browser. How do you get an insecure link to show as OK when added to a secure page?
links have nothing to do with it any ssl site can have none ssl links
do you see facebook, youtube ar any other sll site all messed up with http links

only images from none ssl sites on ssl sites show insecure content 
links have nothing to do with it


All other cms and every site downloads the site image and server it local so there no insecure content 
warnings 

oxwall is so far behind in so many areas that would take them 10 minutes to fix each of them 
that theres no way in hell that in the next 10 years this will be fixed 

The Forum post is edited by tammy harris Jan 29 '16
tammy harris
tammy harris Jan 29 '16
please google it you answers have nothing to do with the problem

and you are confusing everyone with things that have nothing to do with the problem or how the problem is caused or whats need to fix it 
tammy harris
tammy harris Jan 29 '16
go to your facebook past this link in newsfeeds or chat or where ever u want

http://www.oxwall.org/

you will see 
the page is stil secure and the link stays the same http://www.oxwall.org/

then inspect the page and see the image is served from facebook not http://www.oxwall.org/


now go to your  https oxwall site and paste the same in newsfeeds or where ever

you will see the link stays http://www.oxwall.org/
but the image is servered from http://www.oxwall.org/


 now do on ssl oxwall site 

http://www.oxwall.org/

gets changed to 

https://www.oxwall.org/

and the image is severed from http://www.oxwall.org/

no s  so is insecure content warning 

now lots of site do not run ssl they only have http

so all the links changed to https do not work and are broken link 


2 huge problems that have been since 1.6   we are at 1.8  so dont expect them to be fixed anytime this decade 



The Forum post is edited by tammy harris Jan 29 '16
tammy harris
tammy harris Jan 29 '16
no please read what i have said links have nothing to do with it 

only image 

go to ur admin pages on ur ssl oxwall site 
make a new page 

put thousand links to oxwall on the new page
http://www.oxwall.org/


then go to https://www.whynopadlock.com/

and test your new site page with thousand http links 

you will see is not problem
tammy harris
tammy harris Jan 29 '16
then go and put one image on that page from http

then retest your page and you will see the insecure content warning 
tammy harris
tammy harris Jan 29 '16
take fb they only play https videos from youtube etc 
if you want thhp video to play on an ssl site it would have to be downloaded to the server first then served from the ssl server

please do a google search its not hard to find the answers


tammy harris
tammy harris Jan 29 '16
yes i reported the problem way back at when 1.6 was released 

Morena Milani
Morena Milani Jan 29 '16
We have to wait so much because solve? 
Morena Milani
Morena Milani Jan 29 '16
That's right, my host said just off the rendirect to https
Tecca
Tecca Jan 29 '16
I posted a temporary solution on fixing SSL rewrites.

@the discusson: That's how SSL works, you need to serve secure content on a HTTPS website. If that means downloading the image, that's what it needs to do, as not every website on the net will have the same image available in HTTPS. HDD space is not an issue, disk is very cheap these days.
tammy harris
tammy harris Jan 29 '16

Quote from Bryan I posted a temporary solution on fixing SSL rewrites.

@the discusson: That's how SSL works, you need to serve secure content on a HTTPS website. If that means downloading the image, that's what it needs to do, as not every website on the net will have the same image available in HTTPS. HDD space is not an issue, disk is very cheap these days.
true space would not be a problem if the image was not downloaded every time the link was posted
and the image was deleted with the post when it gets auto deleted after 3 months no activity