0

Has anyone used the Channel Videos add-on with https? I have tried rewriting all of the URLs in the add-on with https and also tried rewriting the URLs to just //, without a protocol. Both of those methods still produce insecure content on the site. I would appreciate any feedback the community has to offer. I love this add-on, and I really want to use it on this site.

8
  • Not sure if there is a better way so I leave this as a comment. In the past I have hacked the core code to do this, not sure if there is a native way now. Apr 28, 2013 at 18:05
  • How are you embedding the videos? Is it an iframe that is output on the page? I've not used Channel Videos before but YouTube supports HTTPS so can't you just change that to being HTTPS?
    – Ian Young
    Apr 28, 2013 at 19:18
  • I am embedding using https, and I am now using YouTube's url for the thumbnails instead Channel Video's img_url_hd tag. This has helped with keeping the green bar when the page loads, but now when I play the video, the green bar disappears.
    – Kelly Cook
    Apr 28, 2013 at 19:33
  • Are you testing with Google Chrome? I know Chrome can be particularly fussy about that sort of thing but I'd be curious to see if it's the same across other browsers. Is it an actual warning or just a disappearance of the green bar?
    – Ian Young
    Apr 28, 2013 at 19:50
  • Any luck with this?
    – Ian Young
    Apr 30, 2013 at 7:44

3 Answers 3

0

How about wrapping your Channel Video tags with Find and Replace to swap out the protocol:

{exp:replace_plus find='http:' replace='https:'}

    {exp:channel_videos:videos}
        <!-- Template Code -->
    {/exp:channel_videos:videos}

{/exp:replace_plus}

As I've not used Channel Videos before and can't see what is actually being output in the template files you may need to tweak it a bit.

0

Taking YouTube as an example, how about adding this to your .htaccess file:

RewriteEngine on
RewriteBase /
RewriteRule ^youtube/(.*)$ http://www.youtube.com/$1 [L]

And then prefixing the video link with your domain over HTTPS:

<embed src="https://www.yourdomain.com/youtube/v/embed_code" type="application/x-shockwave-flash" allowscriptaccess="always" allowfullscreen="true" width="560" height="340"></embed>

The key is adding https://www.yourdomain.com/youtube/ to the source URI. Apache will then see this and rewrite them to the regular YouTube URI which may result in removing the security warnings.

Again, having not used Channel Videos specifically I'm not sure how you add the source URI but if you have control of this then give that a go.

0

As it turns out, Channel Videos has https built in.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.