Mini Mods - IMG Cacher - SSL Keeper - Mixed Content Block Solution

Pretty much you use this when you want to keep the SSL certificete working on pages that people may use [IMG] tag's without https://.

When you use SSL on your forum, and somebody embeds an image from a non-ssl host, lots of browsers will give you a warning and say the website is unsafe ---this is a solution to that problem.

Specifically, Mozilla has a 'Mixed Content Blocker', which makes it so if you are on an https:// website, it won't load any content on the same domain, using http://.



NOTE: MAKE SURE THE .HTACCESS FILE IN cache-img/ IS WORKING!



Upload the files into your root directory, and that's it.

Then you need to create a plugin (admincp -> plugins & products -> add new plugin)
Hook location: bbcode_img_match
Title: SSL IMG Cacher
Execution order: 5
Plugin PHP Code:

$link_parsed = parse_url($link);
if ($link_parsed['host'] != '[LINK_TO_YOUR_WEBSITE]')
{
 $link = $this->registry->options['bburl'] . '/cache.php?img=' . urlencode($link);
 $retval = ($fullsize ? '<div class="size_fullsize">' : '')  . '<img src="' .  $link . '" border="0" alt="" />' . ($fullsize ? '</div>' : '');
}

Plugin is active: Yes


edit "[LINK_TO_YOUR_WEBSITE]" - Without http, example: www.dragonbyte-tech.com or www.internot.info etc. etc.

Then you are done.

It should be secure as the actual directory for the images is not available.(deny from all in htaccess)


I would also suggest adding this to robots.txt

User-agent: *
Disallow: /cache.php

Also I suggest you add something like this to .htaccess:

<FilesMatch "cache\.php$">
Header set Cache-Control "max-age=86400, public"
</FilesMatch>

======
I only give support to people who have pressed 'installed' this.
======


Source&stuff can be found here: https://github.com/MegaManSec/IMG

For vB3.8 solution, go here: https://vborg.vbsupport.ru/showthrea...75#post2411575 (Thanks to Kh99)

[djbaxter]

Thank you. I was having difficulty with the "mixed content" warning for one of my forums which exists as a subdomain.

I tried a competitive add-on which sadly did not work for me.

Your instructions for installing this add-on are a little ambiguous

• files and folders to upload (cache-img and images folders, cache.html, cache.php) might be better packaged under the standard Upload folder
• you need to add the instruction to change the properties of the cache-img folder to 777 after uploading
• the instructions on replacing [LINK_TO_YOUR_WEBSITE] with the domain of the forum might explicitly state "including the square brackets"

but I am very happy to report that this completely resolved the mixed content issue for me. :up:

[weinstoc]

Hi,

I installed this and it looked like it was working fine...but I forgot that our forums are served out of three load balanced servers...so each had its own cache. I moved the location of cache-img to a shared device to solve this. What can I do to make the previously cached images show up properly? (There already so many cached files on each server that the mv * command gets an error.)

[Dave]

What do you mean by "What can I do to make the previously cached images show up properly?"?
Did you move all the images to the cache folder on the new server but it's not working? Are you sure the chown (group) and chmod permissions are properly setup?

[weinstoc]

I am in the process of moving them now. When I could not get a simple mv * /shared_folder to work I was hoping things would be re-cached. But I am using tar to do the transfer now. Hopefully that will work.

[weinstoc]

Ok, everything has been moved...but this isn't showing up. It seems to be an aberration though as others are showing up fine.

https://forumserver.twoplustwo.com/s...&postcount=392

[Dave]

Does the file https%3A%2F%2Fimgur.com%2FMkp4JII.gif exist in the cache folder?
If it does exist, it might be a permission problem of the file or cache folder.

[Guinevere]

Great mod and fixes the mixed content issue, thanks - unfortunately we run a pretty large forum and the saved images are adding about 300mb a day to our server... anyone know of an option that doesn't require the use of so much server space? That's going to be an extra GB every four days, so it's fine for a temporary solution but not in the long term.

edit: If anyone else has this issue, and wants an alternate solution I ended up adding a replacement variable in each skin which found instances of http: and changed them to https: , after giving the members warning that they would only be able to use image hosts that supported https from now on.

[woodmj]

Brilliant mod! Goodbye mixed content issues.

[Rob Graves]

Thanks man! You ever come to Negril, look me up! The first rounds are on me!

[BGObsession]

I've installed this but it has not resolved my mixed content flags at https://www.bgobsession.com

Yes - I've done the following:
1) All files uploaded to root directory
2) CHmodded the cache-img folder to 777
3) Created plug-in and added my website address to the [] field
4) Edited my robots.txt file and the .htaccess file as described

I've done a cache clear on vbulletin admincp, cleared my Sucuri firewall cache, and browser cache but still getting mixed content flagged.

Any ideas or suggestions would be greatly appreciated.