Slitherine Forum should be HTTPS

Moderator: Slitherine Core

IainMcNeil
Site Admin
Site Admin
Posts: 13551
Joined: Fri Apr 01, 2005 10:19 am

Re: Slitherine Forum should be HTTPS

Post by IainMcNeil » Fri Feb 28, 2020 12:58 pm

If you have a bookmark to an http version of the site please update it. We'll check there are no internal links to http.

Rigafan
Private First Class - Wehrmacht Inf
Private First Class - Wehrmacht Inf
Posts: 7
Joined: Mon May 07, 2018 4:35 pm

Re: Slitherine Forum should be HTTPS

Post by Rigafan » Sun Sep 20, 2020 6:15 pm

IainMcNeil wrote:
Fri Feb 28, 2020 12:58 pm
If you have a bookmark to an http version of the site please update it. We'll check there are no internal links to http.
The main site is using HTTPS but the forum still links to HTTP

gaelpq
Private First Class - Opel Blitz
Private First Class - Opel Blitz
Posts: 1
Joined: Mon Sep 21, 2020 6:38 am
Contact:

Re: Slitherine Forum should be HTTPS

Post by gaelpq » Mon Sep 21, 2020 6:43 am

Thanks for posting, I had no idea

GabeKnight
Lieutenant-General - Nashorn
Lieutenant-General - Nashorn
Posts: 3289
Joined: Mon Nov 27, 2017 10:24 pm

Re: Slitherine Forum should be HTTPS

Post by GabeKnight » Sun Oct 04, 2020 3:29 pm

IainMcNeil wrote:
Fri Feb 28, 2020 12:58 pm
If you have a bookmark to an http version of the site please update it. We'll check there are no internal links to http.
After entering the login information I'm forwarded automatically from the secure login to the non-SSL forum.

I can change the "https" prefix then manually, of course, but I'd prefer the forum would not switch on its own.

Edmon
Slitherine
Slitherine
Posts: 155
Joined: Thu Oct 17, 2019 12:50 pm

Re: Slitherine Forum should be HTTPS

Post by Edmon » Fri Oct 09, 2020 3:09 pm

I will see if I can re-highlight this issue. I can confirm I am facing the same issue on Chrome.

GabeKnight
Lieutenant-General - Nashorn
Lieutenant-General - Nashorn
Posts: 3289
Joined: Mon Nov 27, 2017 10:24 pm

Re: Slitherine Forum should be HTTPS

Post by GabeKnight » Fri Oct 09, 2020 5:18 pm

Thanks. I'm using the Firefox browser, if it helps.

IainMcNeil
Site Admin
Site Admin
Posts: 13551
Joined: Fri Apr 01, 2005 10:19 am

Re: Slitherine Forum should be HTTPS

Post by IainMcNeil » Tue Oct 13, 2020 9:26 am

Please supply the URL from where you are directed to an http forum. Note if you are on a http login you will go to an http forum. You need to use a link to the https login to get to an https forum. There are no links within eeh sites code that use http so its only possible if it comes from a forum post with an old url or a bookmark. These need to be fixed manually one by one and you need to supply a url where you got it from.

GabeKnight
Lieutenant-General - Nashorn
Lieutenant-General - Nashorn
Posts: 3289
Joined: Mon Nov 27, 2017 10:24 pm

Re: Slitherine Forum should be HTTPS

Post by GabeKnight » Thu Oct 22, 2020 5:32 am

IainMcNeil wrote:
Tue Oct 13, 2020 9:26 am
Please supply the URL from where you are directed to an http forum. Note if you are on a http login you will go to an http forum. You need to use a link to the https login to get to an https forum. There are no links within eeh sites code that use http so its only possible if it comes from a forum post with an old url or a bookmark. These need to be fixed manually one by one and you need to supply a url where you got it from.
Sorry, didn't see this.

I'm linking from:

Code: Select all

 https://www.slitherine.com/forum/viewforum.php?f=264
The login page is also SSL.
But then I'm redirected to here:

Code: Select all

http://www.slitherine.com/forum/index.php?sid=2375a250[...]

vonZipper
Lance Corporal - SdKfz 222
Lance Corporal - SdKfz 222
Posts: 24
Joined: Sat Mar 28, 2015 8:23 pm

Re: Slitherine Forum should be HTTPS

Post by vonZipper » Mon Oct 26, 2020 4:59 pm

HTTPS should really be forced at the server level via htaccess. There is really no reason to allow anything to resolve via HTTP.

IainMcNeil
Site Admin
Site Admin
Posts: 13551
Joined: Fri Apr 01, 2005 10:19 am

Re: Slitherine Forum should be HTTPS

Post by IainMcNeil » Wed Oct 28, 2020 9:42 am

I've visited https://www.slitherine.com/forum/viewforum.php?f=264 but it all works fine for me. Can you explain exactly what you click to end up at http?

Swuul
Staff Sergeant - Kavallerie
Staff Sergeant - Kavallerie
Posts: 322
Joined: Wed Mar 15, 2017 5:44 pm

Re: Slitherine Forum should be HTTPS

Post by Swuul » Wed Oct 28, 2020 2:23 pm

IainMcNeil wrote:
Wed Oct 28, 2020 9:42 am
I've visited https://www.slitherine.com/forum/viewforum.php?f=264 but it all works fine for me. Can you explain exactly what you click to end up at http?
Typing www.slitherine.com/forum to the browser, and I end up at http://w ww.slitherine.com/forum/

Clicking from there this thread, and I end up the current post:

http://w ww.slitherine.com/forum/viewtopic.php?f=10&p=886328#p886328

Notice that lack of https:// (EDIT: Space added to the address so that it is more obvious to see)

To end up on the secure forum (the https version) I *spesifically* have to type https://www.slitherine.com/forum/ or else I end up on the unsecure version. By any logic it should be vice-versa (if the http version of the address really has to exist for some reason), ie it should default to https and/or always redirect to the https anyway.
There are three kinds of people, those who can count and those who can't.

GabeKnight
Lieutenant-General - Nashorn
Lieutenant-General - Nashorn
Posts: 3289
Joined: Mon Nov 27, 2017 10:24 pm

Re: Slitherine Forum should be HTTPS

Post by GabeKnight » Thu Oct 29, 2020 10:05 am

IainMcNeil wrote:
Wed Oct 28, 2020 9:42 am
I've visited https://www.slitherine.com/forum/viewforum.php?f=264 but it all works fine for me. Can you explain exactly what you click to end up at http?
Nuttin'. I'm innocent... :wink:

All I did was the obvious, I guess: click on the login link (next to the "register" link in the top-right) to get to here:

Code: Select all

https://www.slitherine.com/forum/ucp.php?mode=login
The login informations (i.e. password) are stored within my browser; then the redirect to http.

Still happens. And I really liked to be redirected back (at least) to the same forum/thread I've entered my login information at.

zakblood
Most Active User 2017
Most Active User 2017
Posts: 16087
Joined: Thu Jun 12, 2014 6:44 pm

Re: Slitherine Forum should be HTTPS

Post by zakblood » Sun Nov 01, 2020 9:30 am

i think the issue is, no matter what you do, as the lock in on when i sign in but when you go to some pages of the forum and then back onto the main pages of the forum, the lock comes off and doesn't come back on, so it's not just a browser one, it's a site one, with some pages still no putting the lock back on once visited the page
Please supply the URL from where you are directed to an http forum. Note if you are on a http login you will go to an http forum. You need to use a link to the https login to get to an https forum. There are no links within eeh sites code that use http so its only possible if it comes from a forum post with an old url or a bookmark. These need to be fixed manually one by one and you need to supply a url where you got it from.
so it seems it's not such a simple fix, if each and every manual page which is wrong needs highlighting
1.jpg
1.jpg (55.71 KiB) Viewed 1074 times

zakblood
Most Active User 2017
Most Active User 2017
Posts: 16087
Joined: Thu Jun 12, 2014 6:44 pm

Re: Slitherine Forum should be HTTPS

Post by zakblood » Sun Nov 01, 2020 9:45 am

then to follow it up and alter, using the link saved to put it back on, but that's needed almost every page i visit
2.jpg
2.jpg (45.27 KiB) Viewed 1071 times
3.jpg
3.jpg (49.55 KiB) Viewed 1071 times
so quite a lot of the forum still have issues with links not taking back to the secure part, never bothered me tbh, as i buy from the secure part, but do see what others are saying and seeing

IainMcNeil
Site Admin
Site Admin
Posts: 13551
Joined: Fri Apr 01, 2005 10:19 am

Re: Slitherine Forum should be HTTPS

Post by IainMcNeil » Wed Nov 04, 2020 9:53 am

I've referred it on to the web team to see if there is something we need to do.

Post Reply

Return to “General Discussion”