images not showing in post

Get help with installation and running phpBB 3.2.x here. Please do not post bug reports, feature requests, or extension related questions here.
Post Reply
User avatar
Lumpy Burgertushie
Registered User
Posts: 66724
Joined: Mon May 02, 2005 3:11 am

images not showing in post

Post by Lumpy Burgertushie » Tue May 14, 2019 11:50 pm

ok, a client has this strange issue.
I see he has made a post as well. mine can just be a little more info about what is happening.

after update to 3.2.7 one user has many posts with many images.

he is posting them using http.

they are not showing in the posts.
just the word image.

if you right click and choose view image the link takes you to the poster's website where the images are.

you get an "secure connection failed" error . and it is actually trying to take you to

if you view the actual post, you will see that he is posting like this ... 800_01.jpg

notice no https just http
his site is not using SSL at all.

now, you can copy his image url and post it here on phpbb, on any other board etc. and it works just fine.

the images are there as long as you use http

I personally think it is a problem with his cloudfare setup.

he has cloudfare running on the server. I had to remove the htaccess redirect because it was conflicting with the cloudfare https redirect.

I know very little about cloudfare other that it basically sucks.

anybody got any ideas ab out this?

I'm baaaaaccckkkk. still doing work on donation basis. PM your needs.

Premium phpBB 3.2 Styles by

If a tree falls in the forest and nobody is there, does it make a sound?

User avatar
Community Team Member
Community Team Member
Posts: 3299
Joined: Wed Dec 22, 2004 3:52 am
Location: Pennsylvania, U.S.A.

Re: images not showing in post

Post by thecoalman » Mon May 20, 2019 1:34 pm

Lumpy, need a link to the page it won't load on. If you want to look at yourself there is header that can be set both at server level or on Cloudflare that will tell the browser all content must be over https. ... -Security-

HSTS is a web security technology that secures HTTPS web servers against downgrade attacks. Downgrade attacks (also known as SSL stripping attacks) are a form of man-in-the-middle attack in which an attacker redirects web browsers from a correctly configured HTTPS web server to a malicious server.

HSTS consists of an HTTP header with several parameters that direct compliant web browsers to:

turn all HTTP links into HTTPS links, and
upgrade all browser SSL warnings into errors that cannot be bypassed to view the website
“Results! Why, man, I have gotten a lot of results! I have found several thousand things that won’t work.”

Attributed - Thomas Edison

Post Reply

Return to “[3.2.x] Support Forum”