Mini Mods - IMG Cacher - SSL Keeper - Mixed Content Block Solution

Pretty much you use this when you want to keep the SSL certificete working on pages that people may use [IMG] tag's without https://.

When you use SSL on your forum, and somebody embeds an image from a non-ssl host, lots of browsers will give you a warning and say the website is unsafe ---this is a solution to that problem.

Specifically, Mozilla has a 'Mixed Content Blocker', which makes it so if you are on an https:// website, it won't load any content on the same domain, using http://.



NOTE: MAKE SURE THE .HTACCESS FILE IN cache-img/ IS WORKING!



Upload the files into your root directory, and that's it.

Then you need to create a plugin (admincp -> plugins & products -> add new plugin)
Hook location: bbcode_img_match
Title: SSL IMG Cacher
Execution order: 5
Plugin PHP Code:

$link_parsed = parse_url($link);
if ($link_parsed['host'] != '[LINK_TO_YOUR_WEBSITE]')
{
 $link = $this->registry->options['bburl'] . '/cache.php?img=' . urlencode($link);
 $retval = ($fullsize ? '<div class="size_fullsize">' : '')  . '<img src="' .  $link . '" border="0" alt="" />' . ($fullsize ? '</div>' : '');
}

Plugin is active: Yes


edit "[LINK_TO_YOUR_WEBSITE]" - Without http, example: www.dragonbyte-tech.com or www.internot.info etc. etc.

Then you are done.

It should be secure as the actual directory for the images is not available.(deny from all in htaccess)


I would also suggest adding this to robots.txt

User-agent: *
Disallow: /cache.php

Also I suggest you add something like this to .htaccess:

<FilesMatch "cache\.php$">
Header set Cache-Control "max-age=86400, public"
</FilesMatch>

======
I only give support to people who have pressed 'installed' this.
======


Source&stuff can be found here: https://github.com/MegaManSec/IMG

For vB3.8 solution, go here: https://vborg.vbsupport.ru/showthrea...75#post2411575 (Thanks to Kh99)

[final kaoss]

Thanks, I've added it to my new article which helps to prevent mixed content issues.
https://vborg.vbsupport.ru/showthread.php?t=326118

[therother]

I've been using bridge2heyday's plugin with this mod. It seems to work great for most things. But I've been noticing a significant slow down on older threads where the images are now longer available, on either http or https. So particularly image heavy threads can take upwards of ten minutes to load.

I've been identifying image sites that can be autoupdated from http to https (eg imgur and imageshack), which has alleviated some of the issue, but is there a more robust solution?

[rekha]

nice mod

[NeoDio]

Originally Posted by hakkuo23

Here is a version that just displays the image, and doesn't save it, to save server space

PHP Code:

<?php

function curlHeaderCallback($query, $header){
    global $mime;
    if(stripos($header, "content-type")!==false){
        header(trim($header));
    }
    return strlen($header); 
}

$image = $_GET['img'];

$query = curl_init($image);
curl_setopt($query, CURLOPT_USERAGENT, "Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.8.1.9) Gecko/20071025 Firefox/2.0.0.9");
curl_setopt($query, CURLOPT_CONNECTTIMEOUT ,0);
curl_setopt($query, CURLOPT_TIMEOUT, 10);
curl_setopt($query, CURLOPT_HEADERFUNCTION, 'curlHeaderCallback'); 
curl_setopt($query, CURLOPT_RETURNTRANSFER, 1);
$ret = curl_exec($query);
echo $ret;

I'm confused as to where this goes. It looks like it's supposed to replace the code inside the function getimg($url) but wouldn't that make it stop working since it's not using the curl_init($url) anymore? Also is that HeaderCallback function supposed to go inside the getimg function as well?

[richTV]

anyone try this on vB3 ?

I'm using vb3.8.7 Patch Level 2

[z3r0]

Originally Posted by richTV

anyone try this on vB3 ?

I'm using vb3.8.7 Patch Level 2

https://vborg.vbsupport.ru/showthrea...75#post2411575