Author Topic: https/SSL enabled on LearnNa'vi Forum  (Read 2069 times)

0 Members and 1 Guest are viewing this topic.

Offline Tìtstewan

  • LearnNavi Zeykoyu
  • Toruk Makto
  • Palulukan Makto
  • *****
  • *
  • *
  • Posts: 9846
  • de Germany
  • Karma: 324
  • Ke lu oeru kea krr krrtalun!
    • My YouTube Channel
https/SSL enabled on LearnNa'vi Forum
« on: February 16, 2016, 10:40:34 pm »
Kaltxì ma smuk,

I was busy with creating a special forum plugin exclusively for LearnNa'vi that makes possible to have https/SSL on almost all pages. Posted images and avatars from externel non-https sources are used to go through an image proxy to prevent mixed content issue. By this, LN's safety has been increased, woo! :D

This plugin is absolutely unique, and my first created plugin with that size. If you see bugs or a weird behavior especially related with images and forum avatars, please, report them. Seiyi irayo! :)

-| Dict-Na'vi.com | Na'viteri Files | FAQ | LM | Puk Pxaw 'Rrta | Kem si fu kem rä'ä si, ke lu tìfmi. |-

Offline Toruk Makto

  • LearnNavi Admin
  • Toruk Makto
  • Palulukan Makto
  • *****
  • *
  • Posts: 6153
  • nv Eywa'eveng
  • Karma: 215
  • . Txepsiyu Markì .
    • Learn Na'vi
Re: https/SSL enabled on LearnNa'vi Forum
« Reply #1 on: February 17, 2016, 01:12:14 am »
This is, in fact, unique in a production forum of this size and using this application. Major kudos to tsmukan Tìtstewan!

-Markì 

Lì’fyari leNa’vi ’Rrtamì, vay set ’almong a fra’u zera’u ta ngrrpongu
Na'vi Dictionary: http://files.learnnavi.org/dicts/NaviDictionary.pdf

Offline Wllìm

  • Taronyu
  • ****
  • Posts: 523
  • nl Netherlands
  • Karma: 47
    • Wimiso (weptsenge oeyä)
Re: https/SSL enabled on LearnNa'vi Forum
« Reply #2 on: February 17, 2016, 11:03:45 am »
Wou! Txantsan! :D Irayo ma Tìtstewan!

I noticed that some links still refer to the HTTP version of the site instead of the HTTPS version. After you click the link, the forum nicely redirects to the HTTPS version, but I think this still exposes some data, as the initial request is HTTP.

These are the HTTP links I found:
[ul]
  • on a post: cite, applaud, smite, notify moderator;
  • the buttons below the posts on a page: reply, notify, ...;
  • the Site Rules link at the bottom of the page.
[/ul]

In any case, this is really great already! :D
Stress practiceNoun declensionsVerb infixes •  Weather forecasts in Na'viKDE nìNa'viMy Na'vi blog
Seykxel sì nitram! Ngal rolun fì'upxaret aketsuktse'a! :D

Online Toliman

  • Palulukan Makto
  • *****
  • Posts: 6008
  • nv Eywa'eveng
  • Karma: 31
  • Tsatseng mìkam sanhì - tsaw lu oeyä kifkey!
Re: https/SSL enabled on LearnNa'vi Forum
« Reply #3 on: February 17, 2016, 11:12:05 am »
Txantsan  :)

Offline Tìtstewan

  • LearnNavi Zeykoyu
  • Toruk Makto
  • Palulukan Makto
  • *****
  • *
  • *
  • Posts: 9846
  • de Germany
  • Karma: 324
  • Ke lu oeru kea krr krrtalun!
    • My YouTube Channel
Re: https/SSL enabled on LearnNa'vi Forum
« Reply #4 on: February 17, 2016, 11:12:37 am »
Tstunwi! :D

Quote
on a post: cite, applaud, smite, notify moderator;
the buttons below the posts on a page: reply, notify, ...;
I believe, that's a pretty-url mod fail...

Quote
the Site Rules link at the bottom of the page.
That should not be a problem as it just direct one to that thread.

---
The only page one see a mixed content issue is the staff page and that only because of that yahoo online/offline smiley, hrh.

-| Dict-Na'vi.com | Na'viteri Files | FAQ | LM | Puk Pxaw 'Rrta | Kem si fu kem rä'ä si, ke lu tìfmi. |-

Offline Wllìm

  • Taronyu
  • ****
  • Posts: 523
  • nl Netherlands
  • Karma: 47
    • Wimiso (weptsenge oeyä)
Re: https/SSL enabled on LearnNa'vi Forum
« Reply #5 on: February 17, 2016, 11:14:50 am »
Another bug report: I can't edit posts anymore :( (Firefox on Android)... when clicking Save it gives me a security warning and after clicking Continue it redirects to the New Topic page...



I think that it is really stupid that browsers give such warnings for HTTPS sites - they should also do this for all HTTP sites if they want to be consistent...
« Last Edit: February 17, 2016, 11:26:34 am by Tìtstewan »
Stress practiceNoun declensionsVerb infixes •  Weather forecasts in Na'viKDE nìNa'viMy Na'vi blog
Seykxel sì nitram! Ngal rolun fì'upxaret aketsuktse'a! :D

Offline Tìtstewan

  • LearnNavi Zeykoyu
  • Toruk Makto
  • Palulukan Makto
  • *****
  • *
  • *
  • Posts: 9846
  • de Germany
  • Karma: 324
  • Ke lu oeru kea krr krrtalun!
    • My YouTube Channel
Re: https/SSL enabled on LearnNa'vi Forum
« Reply #6 on: February 17, 2016, 11:19:34 am »
That's weird. because I see what you are seeing. And I thought I fixed that? Ok, I'll lurk on the Browser console to see which graphics is causing that.

-| Dict-Na'vi.com | Na'viteri Files | FAQ | LM | Puk Pxaw 'Rrta | Kem si fu kem rä'ä si, ke lu tìfmi. |-

Offline Wllìm

  • Taronyu
  • ****
  • Posts: 523
  • nl Netherlands
  • Karma: 47
    • Wimiso (weptsenge oeyä)
Re: https/SSL enabled on LearnNa'vi Forum
« Reply #7 on: February 17, 2016, 11:23:57 am »
That's weird. because I see what you are seeing. And I thought I fixed that? Ok, I'll lurk on the Browser console to see which graphics is causing that.

Irayo nìli! :D

(and sorry for that huge image; I wanted to edit the post to make it smaller, but I can't ;))

Edit: Test! Yay, it works!
« Last Edit: February 17, 2016, 01:12:25 pm by Wllìm »
Stress practiceNoun declensionsVerb infixes •  Weather forecasts in Na'viKDE nìNa'viMy Na'vi blog
Seykxel sì nitram! Ngal rolun fì'upxaret aketsuktse'a! :D

Offline Tìtstewan

  • LearnNavi Zeykoyu
  • Toruk Makto
  • Palulukan Makto
  • *****
  • *
  • *
  • Posts: 9846
  • de Germany
  • Karma: 324
  • Ke lu oeru kea krr krrtalun!
    • My YouTube Channel
Re: https/SSL enabled on LearnNa'vi Forum
« Reply #8 on: February 17, 2016, 11:27:36 am »
That huge image fixed. (yay for quick edit)

Ok, I'll bang on that weird thing. Stay tuned.

Editing test
« Last Edit: February 17, 2016, 11:40:36 am by Tìtstewan »

-| Dict-Na'vi.com | Na'viteri Files | FAQ | LM | Puk Pxaw 'Rrta | Kem si fu kem rä'ä si, ke lu tìfmi. |-

Offline Tìtstewan

  • LearnNavi Zeykoyu
  • Toruk Makto
  • Palulukan Makto
  • *****
  • *
  • *
  • Posts: 9846
  • de Germany
  • Karma: 324
  • Ke lu oeru kea krr krrtalun!
    • My YouTube Channel
Re: https/SSL enabled on LearnNa'vi Forum
« Reply #9 on: February 17, 2016, 11:41:46 am »
Ok, I found the reason why editing didn't work. It was the pretty url mod which I have now disabled...

Please checke if you can edit your post now.

-| Dict-Na'vi.com | Na'viteri Files | FAQ | LM | Puk Pxaw 'Rrta | Kem si fu kem rä'ä si, ke lu tìfmi. |-

Offline Toruk Makto

  • LearnNavi Admin
  • Toruk Makto
  • Palulukan Makto
  • *****
  • *
  • Posts: 6153
  • nv Eywa'eveng
  • Karma: 215
  • . Txepsiyu Markì .
    • Learn Na'vi
Re: https/SSL enabled on LearnNa'vi Forum
« Reply #10 on: February 17, 2016, 12:46:29 pm »
I have corrected the base path for Pretty URLs and updated the rewrite rules.

Pretty URLs is now back on. Can you check to see if the mixed content error is gone?

Lì’fyari leNa’vi ’Rrtamì, vay set ’almong a fra’u zera’u ta ngrrpongu
Na'vi Dictionary: http://files.learnnavi.org/dicts/NaviDictionary.pdf

Offline Tìtstewan

  • LearnNavi Zeykoyu
  • Toruk Makto
  • Palulukan Makto
  • *****
  • *
  • *
  • Posts: 9846
  • de Germany
  • Karma: 324
  • Ke lu oeru kea krr krrtalun!
    • My YouTube Channel
Re: https/SSL enabled on LearnNa'vi Forum
« Reply #11 on: February 17, 2016, 12:49:07 pm »
Pretty URLs is now back on. Can you check to see if the mixed content error is gone?
Image proxy enabled. :)

Test edit

-| Dict-Na'vi.com | Na'viteri Files | FAQ | LM | Puk Pxaw 'Rrta | Kem si fu kem rä'ä si, ke lu tìfmi. |-

Offline Toruk Makto

  • LearnNavi Admin
  • Toruk Makto
  • Palulukan Makto
  • *****
  • *
  • Posts: 6153
  • nv Eywa'eveng
  • Karma: 215
  • . Txepsiyu Markì .
    • Learn Na'vi
Re: https/SSL enabled on LearnNa'vi Forum
« Reply #12 on: February 17, 2016, 12:49:56 pm »
Pretty URLs is now back on. Can you check to see if the mixed content error is gone?
Image proxy enabled. :)

For the edit stuff, I mean.

Lì’fyari leNa’vi ’Rrtamì, vay set ’almong a fra’u zera’u ta ngrrpongu
Na'vi Dictionary: http://files.learnnavi.org/dicts/NaviDictionary.pdf

Offline Tìtstewan

  • LearnNavi Zeykoyu
  • Toruk Makto
  • Palulukan Makto
  • *****
  • *
  • *
  • Posts: 9846
  • de Germany
  • Karma: 324
  • Ke lu oeru kea krr krrtalun!
    • My YouTube Channel
Re: https/SSL enabled on LearnNa'vi Forum
« Reply #13 on: February 17, 2016, 12:51:14 pm »
Yup.

Editing works now. :)

-| Dict-Na'vi.com | Na'viteri Files | FAQ | LM | Puk Pxaw 'Rrta | Kem si fu kem rä'ä si, ke lu tìfmi. |-

Offline Toruk Makto

  • LearnNavi Admin
  • Toruk Makto
  • Palulukan Makto
  • *****
  • *
  • Posts: 6153
  • nv Eywa'eveng
  • Karma: 215
  • . Txepsiyu Markì .
    • Learn Na'vi
Re: https/SSL enabled on LearnNa'vi Forum
« Reply #14 on: February 17, 2016, 12:53:10 pm »
Coolio.

Lì’fyari leNa’vi ’Rrtamì, vay set ’almong a fra’u zera’u ta ngrrpongu
Na'vi Dictionary: http://files.learnnavi.org/dicts/NaviDictionary.pdf

Offline Wllìm

  • Taronyu
  • ****
  • Posts: 523
  • nl Netherlands
  • Karma: 47
    • Wimiso (weptsenge oeyä)
Re: https/SSL enabled on LearnNa'vi Forum
« Reply #15 on: February 17, 2016, 01:21:06 pm »
Awesome, editing works and all links are fixed too! Irayo! :D
Stress practiceNoun declensionsVerb infixes •  Weather forecasts in Na'viKDE nìNa'viMy Na'vi blog
Seykxel sì nitram! Ngal rolun fì'upxaret aketsuktse'a! :D

Offline Toruk Makto

  • LearnNavi Admin
  • Toruk Makto
  • Palulukan Makto
  • *****
  • *
  • Posts: 6153
  • nv Eywa'eveng
  • Karma: 215
  • . Txepsiyu Markì .
    • Learn Na'vi
Re: https/SSL enabled on LearnNa'vi Forum
« Reply #16 on: February 17, 2016, 02:02:34 pm »
Awesome, editing works and all links are fixed too! Irayo! :D

EGGcellent!

Lì’fyari leNa’vi ’Rrtamì, vay set ’almong a fra’u zera’u ta ngrrpongu
Na'vi Dictionary: http://files.learnnavi.org/dicts/NaviDictionary.pdf

Offline Tìtstewan

  • LearnNavi Zeykoyu
  • Toruk Makto
  • Palulukan Makto
  • *****
  • *
  • *
  • Posts: 9846
  • de Germany
  • Karma: 324
  • Ke lu oeru kea krr krrtalun!
    • My YouTube Channel
Re: https/SSL enabled on LearnNa'vi Forum
« Reply #17 on: February 17, 2016, 02:07:38 pm »
The only page one see a mixed content issue is the staff page and that only because of that yahoo online/offline smiley, hrh.
Mixed content issue of the staff list fixed. :)

Awesome, editing works and all links are fixed too! Irayo! :D

EGGcellent!
Fì'u! :D

-| Dict-Na'vi.com | Na'viteri Files | FAQ | LM | Puk Pxaw 'Rrta | Kem si fu kem rä'ä si, ke lu tìfmi. |-

Offline Tìtstewan

  • LearnNavi Zeykoyu
  • Toruk Makto
  • Palulukan Makto
  • *****
  • *
  • *
  • Posts: 9846
  • de Germany
  • Karma: 324
  • Ke lu oeru kea krr krrtalun!
    • My YouTube Channel
Re: https/SSL enabled on LearnNa'vi Forum
« Reply #18 on: February 20, 2016, 03:27:31 am »
I just noticed a little bug regarding avatar in threads that has been chosen from the avatar gallery. I am on it and try to fix it.
I'll need a bit time since the solution is somewhere in this HUGE php array...
Code: (php) [Select]
<?php
'avatar' => array(
'name' => $profile['avatar'],
'image' => $profile['avatar'] == '' ? ($profile['id_attach'] > '<img class="avatar" src="' . (empty($profile['attachment_type']) ? $scripturl '?action=dlattach;attach=' $profile['id_attach'] . ';type=avatar' $modSettings['custom_avatar_url'] . '/' $profile['filename']) . '" alt="" />' '') : (($modSettings['force_ssl'] == && $image_proxy_enabled && (substr($profile['avatar'], 08) != 'https://')) ? $profile['avatar'] = $boardurl '/proxy.php?request=' urlencode($profile['avatar']) . '&hash=' md5($profile['avatar'] . $image_proxy_secret) : (stristr($profile['avatar'], 'http://')) ? '<img class="avatar" src="' $profile['avatar'] . '"' $avatar_width $avatar_height ' alt="" />' '<img class="avatar" src="' $modSettings['avatar_url'] . '/' htmlspecialchars($profile['avatar']) . '" alt="" />'),
'href' => $profile['avatar'] == '' ? ($profile['id_attach'] > ? (empty($profile['attachment_type']) ? $scripturl '?action=dlattach;attach=' $profile['id_attach'] . ';type=avatar' $modSettings['custom_avatar_url'] . '/' $profile['filename']) : '') : (($modSettings['force_ssl'] == && $image_proxy_enabled && (substr($profile['avatar'], 08) != 'https://')) ? $profile['avatar'] = $boardurl '/proxy.php?request=' urlencode($profile['avatar']) . '&hash=' md5($profile['avatar'] . $image_proxy_secret) : (stristr($profile['avatar'], 'http://')) ? $profile['avatar'] : $modSettings['avatar_url'] . '/' $profile['avatar']),
'url' => $profile['avatar'] == '' '' : (($modSettings['force_ssl'] == && $image_proxy_enabled && (substr($profile['avatar'], 08) != 'https://')) ? $profile['avatar'] = $boardurl '/proxy.php?request=' urlencode($profile['avatar']) . '&hash=' md5($profile['avatar'] . $image_proxy_secret) : (stristr($profile['avatar'], 'http://')) ? $profile['avatar'] : $modSettings['avatar_url'] . '/' $profile['avatar'])
),
?>

BTW, Me @ my test forum:
« Last Edit: February 20, 2016, 03:47:26 am by Tìtstewan »

-| Dict-Na'vi.com | Na'viteri Files | FAQ | LM | Puk Pxaw 'Rrta | Kem si fu kem rä'ä si, ke lu tìfmi. |-

Online Toliman

  • Palulukan Makto
  • *****
  • Posts: 6008
  • nv Eywa'eveng
  • Karma: 31
  • Tsatseng mìkam sanhì - tsaw lu oeyä kifkey!

 

Become LearnNavi's friend on Facebook Follow LearnNavi on Twitter! Watch LearnNavi's videos on YouTube

SMF 2.0.15 | SMF © 2017, Simple Machines
Privacy Policy
| XHTML | RSS | WAP2 | Site Rules

LearnNavi is not affiliated with the official Avatar website,
James Cameron, LightStorm Entertainment or The Walt Disney Company.
All trademarks and servicemarks are the properties of their respective owners.
Images in the LearnNavi.org Forums and Gallery may not be used without permission.

LearnNavi Affiliates:
ToS

LearnNavi is the community to learn Na'vi, the Avatar Language
"A place where real friendships are made." -Paul Frommer

AvatarMeet | Learn Na'vi Forum | Learn Na'vi Wiki | Na'viteri

LearnNavi