Would anyone like to discuss moving to SSL/HTTPS?

[Dave]

Could you create a test account for us that we can use to login and look around?

[Sal Collaziano]

Originally Posted by Dave

Could you create a test account for us that we can use to login and look around?

Sure, I can do that. Are you looking for front end or back end?

[Dave]

Frontend only, that will allow us to look around and see if there's any other errors.

[Sal Collaziano]

Originally Posted by Dave

Frontend only, that will allow us to look around and see if there's any other errors.

Sure...

Username: Just Looking
Password: WF8C5DZmcwB2rje7

Thanks!

--------------- Added [DATE]1483043711[/DATE] at [TIME]1483043711[/TIME] ---------------

I forgot to mention that Quick User Finder doesn't work anymore and if I search for an email address, I can only search for the domain name - like "gmail.com" - the @ sign or anything before it will prevent it from working. I can hit enter or submit and the data will just clear out...

--------------- Added [DATE]1483044790[/DATE] at [TIME]1483044790[/TIME] ---------------

I might have just found another issue. When browsing from my mobile phone - clicking on a thread title doesn't click through to the discussion - it functions like I want to moderate...

[Dave]

1. HTTPS requires all resources to be loaded over HTTP on the page. If I check a thread then I notice that your signature has a picture in it that loads over HTTP.

2. Your headinclude template still has a variable that's pointing to HTTP: "var AJAXBASEURL = "http://lf3performance.com/";". The AJAXBASEURL is used to load CKEDITOR if I recall correctly. If this is a bug in vBulletin then just manually change it in the template.

3. This plugin is recommended: https://vborg.vbsupport.ru/showthread.php?t=288060

[Sal Collaziano]

Originally Posted by Dave

1. HTTPS requires all resources to be loaded over HTTP on the page. If I check a thread then I notice that your signature has a picture in it that loads over HTTP.

2. Your headinclude template still has a variable that's pointing to HTTP: "var AJAXBASEURL = "http://lf3performance.com/";". The AJAXBASEURL is used to load CKEDITOR if I recall correctly. If this is a bug in vBulletin then just manually change it in the template.

3. This plugin is recommended: https://vborg.vbsupport.ru/showthread.php?t=288060

Thank you. I'm looking into this stuff right now. I just updated that post before yours:

"I might have just found another issue. When browsing from my mobile phone - clicking on a thread title doesn't click through to the discussion - it functions like I want to moderate..."

Any thoughts on that? Perhaps the fix you just mentioned will take care of that...

--------------- Added [DATE]1483045109[/DATE] at [TIME]1483045109[/TIME] ---------------

I see this in the headinclude template:
var AJAXBASEURL = "{vb:raw ajaxbaseurl}";

What might I change that to?

[Dave]

I believe the ajaxbaseurl variable is generated based on the server settings. Since you use Cloudflare, the variable that vBulletin uses to determine whether HTTPS is used is not set and therefore it's still pointing to HTTP.

You can change it to

var AJAXBASEURL = "https://lf3performance.com/";

[Sal Collaziano]

Originally Posted by Dave

I believe the ajaxbaseurl variable is generated based on the server settings. Since you use Cloudflare, the variable that vBulletin uses to determine whether HTTPS is used is not set and therefore it's still pointing to HTTP.

You can change it to

var AJAXBASEURL = "https://lf3performance.com/";

That DID take care of the editor issue! That's a better fix than editing the class_bootstrap.php file. Thank you...

-- This also fixed that other issue I mentioned where in mobile, clicking a thread title opened the moderation settings...

--------------- Added [DATE]1483046107[/DATE] at [TIME]1483046107[/TIME] ---------------

My only other major issue is the attachments not working. The AdminCP issues go away if I turn off SSL for the back end - which is fine by me...

--------------- Added [DATE]1483113243[/DATE] at [TIME]1483113243[/TIME] ---------------

Does anyone have any clues as to why attachments might not work after switching to SSL/HTTPS?

[Mattwhf]

Originally Posted by Sal Collaziano

I'm guessing this isn't something anyone really wants to talk about. My vBulletin 3 sites seem to find SSL very attractive. No problems. vBulletin 4 is another story. Is anyone running SSL on vB4 without any problems? A few issues I've encountered so far...

1. The editor doesn't work anymore. You need to edit code in class_bootstrap.php to fix that problem. FIXED BY DAVE

2. The "Reply With Quote" button doesn't work anymore - unless you click it once, wait for the spinning "loading" gif to appear - and then click again. Just double clicking doesn't work. FIXED BY DAVE

3. Attachments don't work. You can get as far as clicking submit to upload your file - but then the attachment window just fills with a vBulletin page that states you don't have permission to do what you're doing...

4. Quick User Finder doesn't work anymore and if I search for an email address, I can only search for the domain name - like "gmail.com" - the @ sign or anything before it will prevent it from working. I can hit enter or submit and the data will just clear out...

That's all I found before I gave up and turned SSL off... If anyone would like to talk about their challenges and/or successes, please do...

I am having same issues.

Where is @Paul M? we are needing your support to fix errors on vB 4.2.5 bt4, running with php 7.1

[z3r0]

4.2.4&5 works absolutely fine on https, any issues you are having must be caused by local configuration or addons.