Slitherine Forum should be HTTPS

[IainMcNeil]

If you have a bookmark to an http version of the site please update it. We'll check there are no internal links to http.

[Rigafan]

If you have a bookmark to an http version of the site please update it. We'll check there are no internal links to http.

The main site is using HTTPS but the forum still links to HTTP

[gaelpq]

Thanks for posting, I had no idea

[GabeKnight]

If you have a bookmark to an http version of the site please update it. We'll check there are no internal links to http.

After entering the login information I'm forwarded automatically from the secure login to the non-SSL forum.

I can change the "https" prefix then manually, of course, but I'd prefer the forum would not switch on its own.

[Edmon]

I will see if I can re-highlight this issue. I can confirm I am facing the same issue on Chrome.

[GabeKnight]

Thanks. I'm using the Firefox browser, if it helps.

[IainMcNeil]

Please supply the URL from where you are directed to an http forum. Note if you are on a http login you will go to an http forum. You need to use a link to the https login to get to an https forum. There are no links within eeh sites code that use http so its only possible if it comes from a forum post with an old url or a bookmark. These need to be fixed manually one by one and you need to supply a url where you got it from.

[GabeKnight]

Please supply the URL from where you are directed to an http forum. Note if you are on a http login you will go to an http forum. You need to use a link to the https login to get to an https forum. There are no links within eeh sites code that use http so its only possible if it comes from a forum post with an old url or a bookmark. These need to be fixed manually one by one and you need to supply a url where you got it from.

Sorry, didn't see this.

I'm linking from:

Code: Select all

 https://www.slitherine.com/forum/viewforum.php?f=264

The login page is also SSL.
But then I'm redirected to here:

Code: Select all

http://www.slitherine.com/forum/index.php?sid=2375a250[...]

[vonZipper]

HTTPS should really be forced at the server level via htaccess. There is really no reason to allow anything to resolve via HTTP.

[IainMcNeil]

I've visited https://www.slitherine.com/forum/viewforum.php?f=264 but it all works fine for me. Can you explain exactly what you click to end up at http?

[Swuul]

I've visited https://www.slitherine.com/forum/viewforum.php?f=264 but it all works fine for me. Can you explain exactly what you click to end up at http?

Typing www.slitherine.com/forum to the browser, and I end up at http://w ww.slitherine.com/forum/

Clicking from there this thread, and I end up the current post:

http://w ww.slitherine.com/forum/viewtopic.php?f=10&p=886328#p886328

Notice that lack of https:// (EDIT: Space added to the address so that it is more obvious to see)

To end up on the secure forum (the https version) I *spesifically* have to type https://www.slitherine.com/forum/ or else I end up on the unsecure version. By any logic it should be vice-versa (if the http version of the address really has to exist for some reason), ie it should default to https and/or always redirect to the https anyway.

[GabeKnight]

I've visited https://www.slitherine.com/forum/viewforum.php?f=264 but it all works fine for me. Can you explain exactly what you click to end up at http?

Nuttin'. I'm innocent...

All I did was the obvious, I guess: click on the login link (next to the "register" link in the top-right) to get to here:

Code: Select all

https://www.slitherine.com/forum/ucp.php?mode=login

The login informations (i.e. password) are stored within my browser; then the redirect to http.

Still happens. And I really liked to be redirected back (at least) to the same forum/thread I've entered my login information at.

[zakblood]

i think the issue is, no matter what you do, as the lock in on when i sign in but when you go to some pages of the forum and then back onto the main pages of the forum, the lock comes off and doesn't come back on, so it's not just a browser one, it's a site one, with some pages still no putting the lock back on once visited the page

Please supply the URL from where you are directed to an http forum. Note if you are on a http login you will go to an http forum. You need to use a link to the https login to get to an https forum. There are no links within eeh sites code that use http so its only possible if it comes from a forum post with an old url or a bookmark. These need to be fixed manually one by one and you need to supply a url where you got it from.

so it seems it's not such a simple fix, if each and every manual page which is wrong needs highlighting

1.jpg (55.71 KiB) Viewed 5122 times

[zakblood]

then to follow it up and alter, using the link saved to put it back on, but that's needed almost every page i visit

2.jpg (45.27 KiB) Viewed 5119 times

3.jpg (49.55 KiB) Viewed 5119 times

so quite a lot of the forum still have issues with links not taking back to the secure part, never bothered me tbh, as i buy from the secure part, but do see what others are saying and seeing

[IainMcNeil]

I've referred it on to the web team to see if there is something we need to do.

[GabeKnight]

Still nothing?