7
votes
Accepted
Variable SSL and Cookies
Yes, the cookies are still susceptible to being intercepted. The full set of cookies for matching domains is transmitted by the browser with each page request to that domain, even if the original ...
- 1,232
4
votes
https and Control Panel mixed content error
This is always a themes folder and protocol issue, I've found. You mentioned this:
$env_config['cp_url'] = $env_config['base_url'] . '/admin.php';
What are you parameters for various $env_config ...
- 5,900
2
votes
Accepted
Unable to use Assets in in HTTPS
It's also worth noting that using protocol relative ( //domain.com ) will work in most situations. This allows you to not have to hardcode a protocol specific url. Helpful when you're using the same ...
- 680
2
votes
Unable to use Assets in in HTTPS
Just make sure your site url and all of your url paths in your admin > general configuration are https:// and also go to your content > file > file upload preferences and make sure that the url path ...
- 1,029
2
votes
Accepted
SSL Certificate Breaking User Login - ExpressionEngine
This was a silly oversight after a long week of coding. Upon login the website redirected with a prefix of "www" where the rest of the site does not use this.
Fixed with WWW resolve in .htaccess
- 431
2
votes
When installing an SSL certificate the control panel css breaks
Just remove the protocol from the Default base URL in system settings > URL and Path Settings, so you have:
//yourdomain.com/
instead of
http://yourdomain.com/
2
votes
SSL Certificate Breaking the Site Style Sheets - Looking for a fix
You'll need to access your templates fix this issue. Log in to your control panel, and visit:
Design -> Templates -> Template Manager
Most likely, you'll have a template group named "Embeds", "...
- 5,900
2
votes
Accepted
Stash content depending on SSL / https
First thing to ask is, do you really need to? Your links could just be protocol relative:
{stash:item_link}//example.com{/stash:item_link}
If that's not the issue then you could create a global ...
- 5,234
1
vote
Accepted
Force Stash to output https
Looks like I needed to clear the ce cache directory and it's working now.
- 121
1
vote
The right place to force SSL on entire domain
this worked for me:
Options -Indexes
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteBase /
# Removes index.php from ExpressionEngine URLs
RewriteCond %{...
1
vote
When installing an SSL certificate the control panel css breaks
check your theme folder url. most likely that is set to http
- 1,849
1
vote
How to - configure EE to play nice with https...?
My general steps are:
Set up General Configuration > URL to the root directory of your site to use https.
Set up File Upload Preferences > > URL of Upload Directory to use https. This makes sure ...
- 627
1
vote
Https problem with channel form
The issue is that your CP and themes folder are not set to run https.
Make sure your cp url and themes folder are set to run https://
You'll possibly run into the same thing with any "ACT=" urls if ...
- 1,987
1
vote
Does CartThrob 2 use SSLv3 in it's Authorize.net payment gateway?
From what I understand, CartThrob's Authorize.net gateway plugin uses curl to communicate with Authorize.net. What kind of SSL connection curl uses depends on your server's configuration, not ...
- 1,156
1
vote
Any way to output a relative URL in exp:channel_files:files?
I might be missing something here, but in your Control Panel > Administration > General Configuration page, just set the URL to the root directory of your site setting to:
//www.mysite.com/
(...
- 323
1
vote
Submitting a form in an https page
Without knowing the details of your install and project, this questions is pretty impossible to answer in my opinion.
First make sure you change $config['site_url'] = "http://domain.com/"; to $config[...
- 12.6k
1
vote
SSL and Insecure Content
Great write up by Jesse Knowles - took me 10 minutes to be up-and-running with https. http://www.jesseknowles.com/blog/article/forcing-https-on-an-expressionengine-site/
- 325
Only top scored, non community-wiki answers of a minimum length are eligible