[Sal Collaziano]

Originally Posted by Dave

1. HTTPS requires all resources to be loaded over HTTP on the page. If I check a thread then I notice that your signature has a picture in it that loads over HTTP.

2. Your headinclude template still has a variable that's pointing to HTTP: "var AJAXBASEURL = "http://lf3performance.com/";". The AJAXBASEURL is used to load CKEDITOR if I recall correctly. If this is a bug in vBulletin then just manually change it in the template.

3. This plugin is recommended: http://www.vbulletin.org/forum/showthread.php?t=288060

Thank you. I'm looking into this stuff right now. I just updated that post before yours:

"I might have just found another issue. When browsing from my mobile phone - clicking on a thread title doesn't click through to the discussion - it functions like I want to moderate..."

Any thoughts on that? Perhaps the fix you just mentioned will take care of that...

--------------- Added 29 Dec 2016 at 20:58 ---------------

I see this in the headinclude template:
var AJAXBASEURL = "{vb:raw ajaxbaseurl}";

What might I change that to?

[Dave]

I believe the ajaxbaseurl variable is generated based on the server settings. Since you use Cloudflare, the variable that vBulletin uses to determine whether HTTPS is used is not set and therefore it's still pointing to HTTP.

You can change it to

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

[Sal Collaziano]

Originally Posted by Dave

I believe the ajaxbaseurl variable is generated based on the server settings. Since you use Cloudflare, the variable that vBulletin uses to determine whether HTTPS is used is not set and therefore it's still pointing to HTTP.

You can change it to

Block Disabled:      (Update License Status)
Suspended or Unlicensed Members Cannot View Code.

That DID take care of the editor issue! That's a better fix than editing the class_bootstrap.php file. Thank you...

-- This also fixed that other issue I mentioned where in mobile, clicking a thread title opened the moderation settings...

--------------- Added 29 Dec 2016 at 21:15 ---------------

My only other major issue is the attachments not working. The AdminCP issues go away if I turn off SSL for the back end - which is fine by me...

--------------- Added 30 Dec 2016 at 15:54 ---------------

Does anyone have any clues as to why attachments might not work after switching to SSL/HTTPS?

[Mattwhf]

Originally Posted by Sal Collaziano

I'm guessing this isn't something anyone really wants to talk about. My vBulletin 3 sites seem to find SSL very attractive. No problems. vBulletin 4 is another story. Is anyone running SSL on vB4 without any problems? A few issues I've encountered so far...

1. The editor doesn't work anymore. You need to edit code in class_bootstrap.php to fix that problem. FIXED BY DAVE

2. The "Reply With Quote" button doesn't work anymore - unless you click it once, wait for the spinning "loading" gif to appear - and then click again. Just double clicking doesn't work. FIXED BY DAVE

3. Attachments don't work. You can get as far as clicking submit to upload your file - but then the attachment window just fills with a vBulletin page that states you don't have permission to do what you're doing...

4. Quick User Finder doesn't work anymore and if I search for an email address, I can only search for the domain name - like "gmail.com" - the @ sign or anything before it will prevent it from working. I can hit enter or submit and the data will just clear out...

That's all I found before I gave up and turned SSL off... If anyone would like to talk about their challenges and/or successes, please do...

I am having same issues.

Where is @Paul M? we are needing your support to fix errors on vB 4.2.5 bt4, running with php 7.1

[z3r0]

4.2.4&5 works absolutely fine on https, any issues you are having must be caused by local configuration or addons.

[Mattwhf]

Originally Posted by z3r0

4.2.4&5 works absolutely fine on https, any issues you are having must be caused by local configuration or addons.

Main issue is I could not upload an image on new threads or new reply.
Anyone knows how to solve this problem first?

[Flibnipktz]

About 2 weeks ago our 4.2.2 forum started "acting strange"... 404 pages right and left. Didn't have a clue what was going on and meanwhile more than one distraught poster wondering if our site was down and why their shortcuts weren't working.

Went over our site URL details, Navigation, tried different browsers, clear cache, logged in and out and could NOT make sense of it. Site was up, htaccess file (briefly) zeroed. Still these maddening access issues.

And then everything cleared up... as if it had never happened. Which feels worse, as I'm sure you can relate.

Fast forward to this morning, checking site stats and there I see 2 domains listed. One is our regular site, and the second has (SSL) following. And suddenly the lights go on in this vaguely technical brain.

/rant It would appear that our site provider (URLJet) has begun transitioning our site, and that the gremlins two weeks ago were the result. No heads-up, no communication, just me and another member of the forum banging our heads for 2 days. I'd pay money to get someone from URLJet in my hands and shake them until their teeth rattled.

I have no doubt that URLJet has good intentions, but the lack of notice is maddening, and it's not the first time. Off to find out what our situation is. /rant off

[RichieBoy67]

Originally Posted by Flibnipktz

About 2 weeks ago our 4.2.2 forum started "acting strange"... 404 pages right and left. Didn't have a clue what was going on and meanwhile more than one distraught poster wondering if our site was down and why their shortcuts weren't working.

Went over our site URL details, Navigation, tried different browsers, clear cache, logged in and out and could NOT make sense of it. Site was up, htaccess file (briefly) zeroed. Still these maddening access issues.

And then everything cleared up... as if it had never happened. Which feels worse, as I'm sure you can relate.

Fast forward to this morning, checking site stats and there I see 2 domains listed. One is our regular site, and the second has (SSL) following. And suddenly the lights go on in this vaguely technical brain.

/rant It would appear that our site provider (URLJet) has begun transitioning our site, and that the gremlins two weeks ago were the result. No heads-up, no communication, just me and another member of the forum banging our heads for 2 days. I'd pay money to get someone from URLJet in my hands and shake them until their teeth rattled.

I have no doubt that URLJet has good intentions, but the lack of notice is maddening, and it's not the first time. Off to find out what our situation is. /rant off

They switched your site to https:// without telling you? That is awful because many internal things need to be done when switching..

Be sure to create a new webmaster tools account in google for the new url..

[Paul M]

Find a new host.

[Flibnipktz]

Thanks for the responses. To their credit, spent most of yesterday aft with URLJet on this and understand a little more about the issue. There still seems to be some confusion about how this was initiated (it may have actually been one of our admins ), but at any rate we now have a trial comodo ssl certificate that expires in June... at which point I assume we'll be looking at either going back to http or paying for an actual certificate.

The main thing is that our small, basic forum seems to have no further fallout, apart from a problem selecting multiple attachments- and we're using the latest "non-approved" uploader.swf. I'm not sure if this is related or not.

URLJet has generally been reliable. My main gripe is that there seems to be a lack of advance notice regarding server-level tasks... and that's probably a common complaint. On this issue, they're saying that they didn't initiate the http>https redirect, and as we seem to be more or less intact, I'm not going to argue the point.

[Flipfloptrader]

Switched over to HTTPs today as the forum is only 3 weeks old and less than 500 posts.

Very straightforward and done within 15 minutes on 4.2.4. I think doing it early helped and don't need to worry about it moving forward.

Now just have to find some traffic!

[RichieBoy67]

Plug ins, posts containing old urls, signatures, etc can make it much more difficult.. A new site should be very easy to do though so you are lucky.

[tareqbd]

We just done the upgrade to 4.2.5 but cKeditor does not load over SSL. Tried changing the "var AJAXBASEURL = "https://domain.tld/"" but still did not work. Could you please help to make things properly working. TIA.

[z3r0]

There shouldn't be any need to mess changing the ajaxbaseurl, as you are using 4.2.5 make sure you set the FORCE URL SCHEME to https in config.php (near the bottom).

[Paul M]

Originally Posted by tareqbd

We just done the upgrade to 4.2.5 but cKeditor does not load over SSL. Tried changing the "var AJAXBASEURL = "https://domain.tld/"" but still did not work. Could you please help to make things properly working. TIA.

Dont mess with such things, its only ends in tears.

1. Make sure "Always use Forum URL as Base Path" is set to Yes.

2. If that doesnt help, move to 4.2.5 and use the Force option in config.php.