Hot answers tagged

6

In your EE config.php / site configuration, is your site URL set with http:// or https:// ? If it's not the latter, try that to see if it solves the issue. I think EE matches the site_url to the exact URL (and protocol) that you set in this configuration variable. The trickier thing is when you have a site that's partially under HTTP and partially HTTPS. In ...


5

It's because EE variables don't detect or utilise https by default, so you have to set them in code. The easiest way is to use an add-on: http://devot-ee.com/add-ons/https-support http://devot-ee.com/add-ons/dm-force-ssl http://devot-ee.com/add-ons/force-ssl (commercial) (In no particular order) I've not used any of these so can't ...


5

If it doesn't need to be particularly secure, create a separate sub-domain, and set up a global variable to show different statuses depending on which sub-domain they're on. If you're using FocusLab Master Config this is simple, otherwise try something like this in your main public index.php file under where it says "CUSTOM CONFIG VALUES": switch($_SERVER["...


4

This is always a themes folder and protocol issue, I've found. You mentioned this: $env_config['cp_url'] = $env_config['base_url'] . '/admin.php'; What are you parameters for various $env_config array entries? Make sure that array is using https for that URL, and also your themes folder must also be behind SSL. Update Hey, so are you forcing SSL for all ...


4

Try using relative paths in your upload preferences.


4

You can avoid the XID validation by making a GET request instead of a POST request. XID validation only occurs when secure_forms is y and the $_POST array is not empty. Or you can generate a valid XID hash by using {XID_HASH} in your template. Maybe something like: <body data-xid="{XID_HASH}"> <script> $.post( 'site/inifinite_scroll_ajax', ...


3

On my servers I use Clam AntiVirus. It is free, have good db and has clamscan which can be used with system commands. For integration native upload need to make ext. used hook file_after_save. For Playa - assets_upload_file Based on pass/fail indication which clamscan is return, make decision - keep it or delete it.


3

I've run into similar issues in the past, and honestly I gave up on htaccess in the end as I never could get it to work exactly as I intended. A much easier solution I found was using an add on to force the redirect instead, doing it this way I gained direct control of pages needed redirecting in templates instead. I used an addon called Force SSL, http://...


1

The following is true for any form generated by EE, including the Low Search form: If you want the action url to be https, make sure the URL to the root directory of your site setting under Admin > General Configuration (aka the site_url config item) also starts with https.


1

In case anyone else runs into this issue, the problem was resolved by removing the protocol from the site URL in the general settings menu. http://mysite.com became //mysite.com and now all of the assets are being delivered through the correct protocol depending on what section of the site you are on.


Only top voted, non community-wiki answers of a minimum length are eligible