Hot answers tagged

7 votes
Accepted

Variable SSL and Cookies

Yes, the cookies are still susceptible to being intercepted. The full set of cookies for matching domains is transmitted by the browser with each page request to that domain, even if the original ...
user avatar
  • 1,232
4 votes

https and Control Panel mixed content error

This is always a themes folder and protocol issue, I've found. You mentioned this: $env_config['cp_url'] = $env_config['base_url'] . '/admin.php'; What are you parameters for various $env_config ...
user avatar
  • 5,900
2 votes
Accepted

Unable to use Assets in in HTTPS

It's also worth noting that using protocol relative ( //domain.com ) will work in most situations. This allows you to not have to hardcode a protocol specific url. Helpful when you're using the same ...
user avatar
2 votes

Unable to use Assets in in HTTPS

Just make sure your site url and all of your url paths in your admin > general configuration are https:// and also go to your content > file > file upload preferences and make sure that the url path ...
user avatar
  • 1,029
2 votes
Accepted

SSL Certificate Breaking User Login - ExpressionEngine

This was a silly oversight after a long week of coding. Upon login the website redirected with a prefix of "www" where the rest of the site does not use this. Fixed with WWW resolve in .htaccess
user avatar
  • 431
2 votes

When installing an SSL certificate the control panel css breaks

Just remove the protocol from the Default base URL in system settings > URL and Path Settings, so you have: //yourdomain.com/ instead of http://yourdomain.com/
user avatar
2 votes

SSL Certificate Breaking the Site Style Sheets - Looking for a fix

You'll need to access your templates fix this issue. Log in to your control panel, and visit: Design -> Templates -> Template Manager Most likely, you'll have a template group named "Embeds", "...
user avatar
  • 5,900
2 votes
Accepted

Stash content depending on SSL / https

First thing to ask is, do you really need to? Your links could just be protocol relative: {stash:item_link}//example.com{/stash:item_link} If that's not the issue then you could create a global ...
user avatar
  • 5,234
1 vote
Accepted

Force Stash to output https

Looks like I needed to clear the ce cache directory and it's working now.
user avatar
1 vote

The right place to force SSL on entire domain

this worked for me: Options -Indexes <IfModule mod_rewrite.c> RewriteEngine On RewriteBase / # Removes index.php from ExpressionEngine URLs RewriteCond %{...
user avatar
1 vote

When installing an SSL certificate the control panel css breaks

check your theme folder url. most likely that is set to http
user avatar
1 vote

How to - configure EE to play nice with https...?

My general steps are: Set up General Configuration > URL to the root directory of your site to use https. Set up File Upload Preferences > > URL of Upload Directory to use https. This makes sure ...
user avatar
  • 627
1 vote

Https problem with channel form

The issue is that your CP and themes folder are not set to run https. Make sure your cp url and themes folder are set to run https:// You'll possibly run into the same thing with any "ACT=" urls if ...
user avatar
  • 1,987
1 vote

Does CartThrob 2 use SSLv3 in it's Authorize.net payment gateway?

From what I understand, CartThrob's Authorize.net gateway plugin uses curl to communicate with Authorize.net. What kind of SSL connection curl uses depends on your server's configuration, not ...
user avatar
  • 1,156
1 vote

Any way to output a relative URL in exp:channel_files:files?

I might be missing something here, but in your Control Panel > Administration > General Configuration page, just set the URL to the root directory of your site setting to: //www.mysite.com/ (...
user avatar
  • 323
1 vote

Submitting a form in an https page

Without knowing the details of your install and project, this questions is pretty impossible to answer in my opinion. First make sure you change $config['site_url'] = "http://domain.com/"; to $config[...
user avatar
  • 12.6k
1 vote

SSL and Insecure Content

Great write up by Jesse Knowles - took me 10 minutes to be up-and-running with https. http://www.jesseknowles.com/blog/article/forcing-https-on-an-expressionengine-site/
user avatar
  • 325

Only top scored, non community-wiki answers of a minimum length are eligible