![]() |
|
Mod Options |
![]() |
|||||||||||||||||||||||
IMG Cacher - SSL Keeper - Mixed Content Block Solution
![]() Developer Last Online: Dec 2016 ![]() ![]() ![]()
Pretty much you use this when you want to keep the SSL certificete working on pages that people may use [IMG] tag's without https://.
When you use SSL on your forum, and somebody embeds an image from a non-ssl host, lots of browsers will give you a warning and say the website is unsafe ---this is a solution to that problem. Specifically, Mozilla has a 'Mixed Content Blocker', which makes it so if you are on an https:// website, it won't load any content on the same domain, using http://. NOTE: MAKE SURE THE .HTACCESS FILE IN cache-img/ IS WORKING! Upload the files into your root directory, and that's it. Then you need to create a plugin (admincp -> plugins & products -> add new plugin) Hook location: bbcode_img_match Title: SSL IMG Cacher Execution order: 5 Plugin PHP Code:
Plugin is active: Yes edit "[LINK_TO_YOUR_WEBSITE]" - Without http, example: www.dragonbyte-tech.com or www.internot.info etc. etc. Then you are done. It should be secure as the actual directory for the images is not available.(deny from all in htaccess) I would also suggest adding this to robots.txt
Also I suggest you add something like this to .htaccess:
====== I only give support to people who have pressed 'installed' this. ====== Source&stuff can be found here: https://github.com/MegaManSec/IMG For vB3.8 solution, go here: http://www.vbulletin.org/forum/showt...75#post2411575 (Thanks to Kh99) Download Now Only licensed members can download files, Click Here for more information. Show Your Support
|
#61
|
|||
|
|||
Start by trying to determine what is causing the mixed content flags: It may be scripts or advertising (including AdSense) as well as images. Test your site here:
Why No Padlock? - Why is my SSL web page insecure? Find the culprit! SSL-check: crawl your HTTPS website and find unsecure content Website Scanner Address any errors you see there. Sometimes, just replacing http:// with simply // will do the trick in scripts and plugins. Also, even if it's only images, you won't see an immediate result. You'll need to allow some time to scan all your images - and that may take a while if you have a lot of them. Are you seeing any entries in the cache-img folder?
__________________
Psychlinks Web Services Affordable Website Design & Management WordPress, vBulletin, Xenforo Customization & Management The following members like this post: BGObsession
|
#62
|
||||
|
||||
I'll take a look at those resources.
No - I'm not seeing anything in the cache-img folder except for the .htaccess file so far... No members have liked this post.
|
#63
|
|||
|
|||
That's because you still have a lot of resources that are served over HTTP, things that this plugin doesn't take care of.
Example: Mixed Content: The page at 'https://www.bgobsession.com/content.php/1079-Blognostications-Week-7-Redskins-at-Eagles-Edition' was loaded over HTTPS, but requested an insecure image 'http://bgobsession.com/images/smilies/smile.png'. This content should also be served over HTTPS. Mixed Content: The page at 'https://www.bgobsession.com/forum.php?home=1' was loaded over HTTPS, but requested an insecure image 'http://bgobsession.com/images/icons/icon1.png'. In the AdminCP under Styles & Templates, create a replacement rule of: http://www.bgobsession.com to https://www.bgobsession.com
__________________
https://technidev.com - security, development, exploits, vBulletin
dave[at]technidev[dot]com Contact me for custom vBulletin 3/4 work & server/website management. No members have liked this post.
|
#64
|
||||
|
||||
So - ran my site's homepage on the first tool. Here's what I get... So why would I still be getting the mixed content warning?
No members have liked this post.
|
#65
|
||||
|
||||
The replacement variable addition fixed a lot of it - thanks so much dj (should've thought of that myself!).
Have a few image links that are still showing up insecure on my forums page. Total number of items: 133 Number of insecure items: 2 Insecure URL: http://bgobsession.com/images/icons/icon1.png Found in: https://www.bgobsession.com/forum.php?home=1 Insecure URL: http://bgobsession.com/images/icons/icon4.png Found in: https://www.bgobsession.com/forum.php?home=1 Not to be dense, but where do I change the image urls for forum page icons? No members have liked this post.
|
#66
|
|||
|
|||
__________________
https://technidev.com - security, development, exploits, vBulletin
dave[at]technidev[dot]com Contact me for custom vBulletin 3/4 work & server/website management. The following members like this post: BGObsession
|
#67
|
||||
|
||||
That did it - thanks so much!
No members have liked this post.
|
#68
|
||||||||
|
||||||||
I am having issues with the fulls size image going 404 while the thumbnail works fine.
An example may be viewed at https://www.websleuths.com/forums/sh...mage-not-found -or- Of course the thumbnail calls the image as an attachment, the 404'd full size image is called from
My plugin is active using hook bbcode_img_match and is 5th in execution, the plugin code is
Any ideas?
__________________
ahfb2000.com - HTML - Web Hosting Directory - Webmaster Tools - Webmaster Books Domain Names - PHP Scripts - Over 4000 5000 6000 ... 13,000 member strong Webmaster Forums No members have liked this post.
|
#69
|
|||
|
|||
[www.websleuths.com] should be changed to www.websleuths.com in the hook PHP code.
__________________
https://technidev.com - security, development, exploits, vBulletin
dave[at]technidev[dot]com Contact me for custom vBulletin 3/4 work & server/website management. No members have liked this post.
|
#70
|
|||
|
|||
Thank you.
__________________
ahfb2000.com - HTML - Web Hosting Directory - Webmaster Tools - Webmaster Books Domain Names - PHP Scripts - Over 4000 5000 6000 ... 13,000 member strong Webmaster Forums No members have liked this post.
|
#71
|
|||
|
|||
Thanks, I've added it to my new article which helps to prevent mixed content issues.
https://www.vbulletin.org/forum/showthread.php?t=326118 No members have liked this post.
|
#72
|
|||
|
|||
I've been using bridge2heyday's plugin with this mod. It seems to work great for most things. But I've been noticing a significant slow down on older threads where the images are now longer available, on either http or https. So particularly image heavy threads can take upwards of ten minutes to load.
I've been identifying image sites that can be autoupdated from http to https (eg imgur and imageshack), which has alleviated some of the issue, but is there a more robust solution? No members have liked this post.
|
#73
|
|||
|
|||
nice mod
No members have liked this post.
|
#74
|
||||
|
||||
Originally Posted by hakkuo23
I'm confused as to where this goes. It looks like it's supposed to replace the code inside the function getimg($url) but wouldn't that make it stop working since it's not using the curl_init($url) anymore? Also is that HeaderCallback function supposed to go inside the getimg function as well?
![]()
No members have liked this post.
|
#75
|
|||
|
|||
anyone try this on vB3 ?
I'm using vb3.8.7 Patch Level 2
__________________
currently using vB3.8.7 No members have liked this post.
|
![]() |
«
Previous Mod
|
Next Mod
»
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests) | |
Mod Options | |
|
|
New To Site? | Need Help? |
All times are GMT. The time now is 10:31.