Has anyone used the Channel Videos add-on with https? I have tried rewriting all of the URLs in the add-on with https and also tried rewriting the URLs to just //, without a protocol. Both of those methods still produce insecure content on the site. I would appreciate any feedback the community has to offer. I love this add-on, and I really want to use it on this site.
8
-
Not sure if there is a better way so I leave this as a comment. In the past I have hacked the core code to do this, not sure if there is a native way now.– Justin KimbrellApr 28, 2013 at 18:05
-
How are you embedding the videos? Is it an iframe that is output on the page? I've not used Channel Videos before but YouTube supports HTTPS so can't you just change that to being HTTPS?– Ian YoungApr 28, 2013 at 19:18
-
I am embedding using https, and I am now using YouTube's url for the thumbnails instead Channel Video's img_url_hd tag. This has helped with keeping the green bar when the page loads, but now when I play the video, the green bar disappears.– Kelly CookApr 28, 2013 at 19:33
-
Are you testing with Google Chrome? I know Chrome can be particularly fussy about that sort of thing but I'd be curious to see if it's the same across other browsers. Is it an actual warning or just a disappearance of the green bar?– Ian YoungApr 28, 2013 at 19:50
-
Any luck with this?– Ian YoungApr 30, 2013 at 7:44
|
Show 3 more comments
3 Answers
How about wrapping your Channel Video tags with Find and Replace to swap out the protocol:
{exp:replace_plus find='http:' replace='https:'}
{exp:channel_videos:videos}
<!-- Template Code -->
{/exp:channel_videos:videos}
{/exp:replace_plus}
As I've not used Channel Videos before and can't see what is actually being output in the template files you may need to tweak it a bit.
answered Apr 28, 2013 at 19:36
Taking YouTube as an example, how about adding this to your .htaccess file:
RewriteEngine on
RewriteBase /
RewriteRule ^youtube/(.*)$ http://www.youtube.com/$1 [L]
And then prefixing the video link with your domain over HTTPS:
<embed src="https://www.yourdomain.com/youtube/v/embed_code" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" width="560" height="340"></embed>
The key is adding https://www.yourdomain.com/youtube/ to the source URI. Apache will then see this and rewrite them to the regular YouTube URI which may result in removing the security warnings.
Again, having not used Channel Videos specifically I'm not sure how you add the source URI but if you have control of this then give that a go.
answered Apr 28, 2013 at 19:58
As it turns out, Channel Videos has https built in.