Limited SSL Usage in phpBB3

Get help with installation and running phpBB 3.0.x here. Please do not post bug reports, feature requests, or MOD-related questions here.
Anti-Spam Guide
Forum rules
END OF SUPPORT: 1 January 2017 (announcement)
jpipitone43
Registered User
Posts: 14
Joined: Thu Sep 18, 2008 8:38 pm

Re: Limited SSL Usage in phpBB3

Post by jpipitone43 »

Anyone?
ToonArmy
Former Team Member
Posts: 4608
Joined: Sat Mar 06, 2004 5:29 pm
Location: Worcestershire, UK
Name: Chris Smith
Contact:

Re: Limited SSL Usage in phpBB3

Post by ToonArmy »

jpipitone43 wrote:Anyone?
The link to that stylesheet is usually relative.
Chris SmithGitHub
jpipitone43
Registered User
Posts: 14
Joined: Thu Sep 18, 2008 8:38 pm

Re: Limited SSL Usage in phpBB3

Post by jpipitone43 »

OK. Thanks
yaashul
Registered User
Posts: 331
Joined: Mon Apr 17, 2006 3:21 pm
Location: India

Re: Limited SSL Usage in phpBB3

Post by yaashul »

I tried it with phpbb 3.08. Find few issues.

At registration page it doesn't display recapcha probably b'coz it call using http connection.

Login page in IE shows a warning stating show non secure content (Yes/No).
yaashul
Registered User
Posts: 331
Joined: Mon Apr 17, 2006 3:21 pm
Location: India

Re: Limited SSL Usage in phpBB3

Post by yaashul »

can someone please suggest what should I do?
User avatar
Noxwizard
Support Team Leader
Support Team Leader
Posts: 10392
Joined: Mon Jun 27, 2005 8:41 pm
Location: Texas, USA
Name: Patrick Webster
Contact:

Re: Limited SSL Usage in phpBB3

Post by Noxwizard »

The reCaptcha address has changed, so the certificate issued for the secure api address that we point to is now invalid. In /includes/captchas/plugins/phpbb_recaptcha_plugin.php, change:

Code: Select all

var $recaptcha_server_secure = 'https://api-secure.recaptcha.net';
to

Code: Select all

var $recaptcha_server_secure = 'https://www.google.com/recaptcha/api';
[Support Template] - [Read Before Posting] - [phpBB Knowledge Base]
Do not contact me for private support, please share the question in our forums.
yaashul
Registered User
Posts: 331
Joined: Mon Apr 17, 2006 3:21 pm
Location: India

Re: Limited SSL Usage in phpBB3

Post by yaashul »

It doesn't solve the issue... still recapcha is not working @least in IE if we enable this hook. We need to enable the content to show this recapcha.
yaashul
Registered User
Posts: 331
Joined: Mon Apr 17, 2006 3:21 pm
Location: India

Re: Limited SSL Usage in phpBB3

Post by yaashul »

Is this registration problem can be solved?
User avatar
Noxwizard
Support Team Leader
Support Team Leader
Posts: 10392
Joined: Mon Jun 27, 2005 8:41 pm
Location: Texas, USA
Name: Patrick Webster
Contact:

Re: Limited SSL Usage in phpBB3

Post by Noxwizard »

The edits worked fine on the server I tested it with. You do have a lot of other content on that site which isn't served over https, which could be causing issues. The changes that have been officially made are here: https://github.com/phpbb/phpbb3/commit/ ... dfa1c920b3
[Support Template] - [Read Before Posting] - [phpBB Knowledge Base]
Do not contact me for private support, please share the question in our forums.
yaashul
Registered User
Posts: 331
Joined: Mon Apr 17, 2006 3:21 pm
Location: India

Re: Limited SSL Usage in phpBB3

Post by yaashul »

I did make only these changes nothing more than that.
yaashul
Registered User
Posts: 331
Joined: Mon Apr 17, 2006 3:21 pm
Location: India

Re: Limited SSL Usage in phpBB3

Post by yaashul »

It works fine on Firefox and IE6 but create problem on IE9...
User avatar
Noxwizard
Support Team Leader
Support Team Leader
Posts: 10392
Joined: Mon Jun 27, 2005 8:41 pm
Location: Texas, USA
Name: Patrick Webster
Contact:

Re: Limited SSL Usage in phpBB3

Post by Noxwizard »

You should try fixing all of the errors that IE reports regarding your attempted usage of https.
SEC7111: HTTPS security is compromised by http://www.fropki.com/styles/prosilver/theme/print.css
ucp.php?mode=register
SEC7111: HTTPS security is compromised by http://www.fropki.com/styles/prosilver/theme/print.css
ucp.php?mode=register
SEC7111: HTTPS security is compromised by http://www.fropki.com/styles/prosilver/ ... orum_fn.js
ucp.php?mode=register
SEC7111: HTTPS security is compromised by http://static.fropki.com/styles/prosilv ... e_logo.gif
ucp.php?mode=register
SEC7115: :visited and :link styles can only differ by color. Some styles were not applied to :visited.
ucp.php?mode=register
SEC7111: HTTPS security is compromised by https://www.fropki.com/ucp.php?mode=register
ucp.php?mode=register
SCRIPT5009: 'apply_onkeypress_event' is undefined
ucp.php?mode=register, line 77 character 4
[Support Template] - [Read Before Posting] - [phpBB Knowledge Base]
Do not contact me for private support, please share the question in our forums.
yaashul
Registered User
Posts: 331
Joined: Mon Apr 17, 2006 3:21 pm
Location: India

Re: Limited SSL Usage in phpBB3

Post by yaashul »

I know about this As I use static subdomain to load cookieless static pics...

SEC7111: HTTPS security is compromised by http://static.fropki.com/styles/prosilv ... e_logo.gif
ucp.php?mode=register


rest of the error I dont have any idea... please suggest how to resolve them
yaashul
Registered User
Posts: 331
Joined: Mon Apr 17, 2006 3:21 pm
Location: India

Re: Limited SSL Usage in phpBB3

Post by yaashul »

Code: Select all

<link href="{T_THEME_PATH}/print.css" rel="stylesheet" type="text/css" media="print" title="printonly" />
<link href="{T_STYLESHEET_LINK}" rel="stylesheet" type="text/css" media="screen, projection" />
<script type="text/javascript" src="{T_TEMPLATE_PATH}/forum_fn.js"></script>
Actually problem exist in this

{T_STYLESHEET_LINK} is actually replaced by https while {T_THEME_PATH} & {T_TEMPLATE_PATH} use http only when we use this hook... i dont know how can they use https instead of http...
User avatar
Noxwizard
Support Team Leader
Support Team Leader
Posts: 10392
Joined: Mon Jun 27, 2005 8:41 pm
Location: Texas, USA
Name: Patrick Webster
Contact:

Re: Limited SSL Usage in phpBB3

Post by Noxwizard »

It looks like you've altered those paths in the php files, as they're not supposed to generate links with http or https at all. They're supposed to be relative paths unless you've defined PHPBB_USE_BOARD_URL_PATH somewhere.

In includes/functions.php, you should have: (~lines 4370 - 4483)

Code: Select all

$web_path = (defined('PHPBB_USE_BOARD_URL_PATH') && PHPBB_USE_BOARD_URL_PATH) ? $board_url : $phpbb_root_path;
...
'T_THEME_PATH'			=> "{$web_path}styles/" . $user->theme['theme_path'] . '/theme',
'T_TEMPLATE_PATH'		=> "{$web_path}styles/" . $user->theme['template_path'] . '/template',
...
'T_STYLESHEET_LINK'		=> (!$user->theme['theme_storedb']) ? "{$web_path}styles/" . $user->theme['theme_path'] . '/theme/stylesheet.css' : append_sid("{$phpbb_root_path}style.$phpEx", 'id=' . $user->theme['style_id'] . '&lang=' . $user->data['user_lang']),
[Support Template] - [Read Before Posting] - [phpBB Knowledge Base]
Do not contact me for private support, please share the question in our forums.
Locked

Return to “[3.0.x] Support Forum”