Moon Phase

Just went SSL, now this plugin is not Secured.. how to fix? - Moon Phase

Just went SSL, now this plugin is not Secured.. how to fix?

by kaspir » Fri Oct 21, 2016 1:38 pm

Screenshot: http://prntscr.com/cx4373

If it was Wordpress, it be a simple fix, but we're in phpbb land which is much more complex coding. I spoke with my host tech support first in hopes there was a htaccess fix or workaround, something I was not finding on google myself. To my disappointment, there is not to both his and my knowledge.

So, that brings me to the dev! I love seeing the moon phases, and really do not want to uninstall this plugin. Any idea hot fixes, or future plans to fix?

Thanks so much! Hope to see your plugin stay on my website.
World of Phaos RPG online is making it's come back! Play free now!
Check out phpBB contributions & extension downloads. :P
kaspir
Registered User
Posts: 203
Joined: Sun Jul 27, 2008 5:05 am
Name: Greg
Contact:

Re: Just went SSL, now this plugin is not Secured.. how to f

by HiFiKabin » Fri Oct 21, 2016 3:23 pm

The 'problem' is that the image of the moon is hosted on and by http://www.calendrier-lunaire.net/ which is obviously an un secured server. That is where the problem lies, and I do not know of any workround for this. As I do not use https myself I can not test in a live environment.

I have found another script that may work, and I would be grateful if you could give it a try, It is not a final script, just a 'try and see if it works' which I can then improve as needed.

Download and unzip the attached, then install as if it was a new version.

Please let me know if/how it works

James
Attachments
moonphase.zip
(8.96 KiB) Downloaded 52 times
User avatar
HiFiKabin
Community Team Member
Community Team Member
Posts: 3984
Joined: Wed May 14, 2014 9:10 am
Location: Swearing at the PC, UK
Name: James
Contact:

Re: Just went SSL, now this plugin is not Secured.. how to f

by kaspir » Sun Oct 23, 2016 3:16 am

Yes, I've been catching up on all this since my SSL addition. You're right, without the hosted moon image link being https there is no other workaround. I'm still in search of a way to whitelist urls from SSL perhaps was my last idea. Going to ask host about that soon.

I am super curious as to how a Wordpress SSL site can overlook a posted http link or image, and still encrypt the page, while phpBB platform does not. I know this is the wrong place to post the question, but while it's on my mind.. what are your thoughts about it?

My search on the forums here only leads to people asking why one would think they need SSL on a forums based site. I really don't wish to opt in on that conversation, I just want to know how WP does it, and why phpBB doesn't.

-=-=-=-=-=-=-=-=-=-=-=-=-=-

New JS SCRIPT Feedback:

Information failed:
s/s: http://prnt.sc/cxqzud

Firefox blocks the content:
http://prntscr.com/cxr150

When plugin enabled, it didn't display at first. Firefox protection blocked it. If disable the Firefox protection, I can see it.. but then site is UN-encrypted. I'm not much a fan on the new visual.. but that's not the goal here.. ;)

I hope to figure out a way to whitelist a single url...
World of Phaos RPG online is making it's come back! Play free now!
Check out phpBB contributions & extension downloads. :P
kaspir
Registered User
Posts: 203
Joined: Sun Jul 27, 2008 5:05 am
Name: Greg
Contact:

Re: Just went SSL, now this plugin is not Secured.. how to f

by kaspir » Sun Oct 23, 2016 3:20 am

Just found this: viewtopic.php?f=46&t=2185927
It may help you with dev of this plugin, it may not, but it helped me understand how phpbb proxy images urls for SSL. And gives me a solution as for images in posts/forums.
World of Phaos RPG online is making it's come back! Play free now!
Check out phpBB contributions & extension downloads. :P
kaspir
Registered User
Posts: 203
Joined: Sun Jul 27, 2008 5:05 am
Name: Greg
Contact:

Re: Just went SSL, now this plugin is not Secured.. how to f

by HiFiKabin » Sun Oct 23, 2016 9:59 am

From what I have read, that workround will only help if you have your own server (not a shared server) and it would be far to complex to apply to just one extension (and I doubt that it would be possible at that level anyway)

The images of the moon in my original Ext are just that, a set of 28 images that are called from the external server depending on the moon phase.

As far as I am aware, there is no way to allow a single unsecure URL to appear on a SSL page.

What I will do is contact Calendrier Lunaire and see if they have any plans to go SSL, or have any other ideas.

Sorry that I can not be more help at this stage.

Also the version check is working on my local test forum, so I suspect that might be a SSL issue as well.

Image


Try replacing the composer.json with the one attached here. I have removed the version check information so it should not error.
Attachments
composer.zip
(591 Bytes) Downloaded 44 times
User avatar
HiFiKabin
Community Team Member
Community Team Member
Posts: 3984
Joined: Wed May 14, 2014 9:10 am
Location: Swearing at the PC, UK
Name: James
Contact:

Re: Just went SSL, now this plugin is not Secured.. how to f

by kaspir » Sun Oct 23, 2016 3:21 pm

HiFiKabin wrote:From what I have read, that workround will only help if you have your own server (not a shared server) and it would be far to complex to apply to just one extension (and I doubt that it would be possible at that level anyway)


Yes, I only pay for shared hosting. And I agree, the work is not worth the outcome in this case to me.

HiFiKabin wrote:As far as I am aware, there is no way to allow a single unsecure URL to appear on a SSL page.


Agreed. UNLESS, through a proxy somehow from my little understanding I still collecting. Which is where the work doesn't pay off for me at this moment.

HiFiKabin wrote:What I will do is contact Calendrier Lunaire and see if they have any plans to go SSL, or have any other ideas.


I used something Siteground offers for free called Let's Encrypt. If Calendrier Lunaire's host has something similiar, it certainly would not hurt them to add it for such clients as myself. It wouldn't affect non-SSL sites. Maybe add this in your message to them, could be beneficial for traffic. :D

HiFiKabin wrote:Sorry that I can not be more help at this stage.


You've helped me so much already, thank you for being available!

HiFiKabin wrote:Try replacing the composer.json with the one attached here. I have removed the version check information so it should not error.


Done and now get the same as your s/s.
World of Phaos RPG online is making it's come back! Play free now!
Check out phpBB contributions & extension downloads. :P
kaspir
Registered User
Posts: 203
Joined: Sun Jul 27, 2008 5:05 am
Name: Greg
Contact:

Re: Just went SSL, now this plugin is not Secured.. how to f

by kaspir » Mon Nov 14, 2016 11:17 am

HiFiKabin has worked out a resolution for me and my SSL site. I can verify HiFiKabin updated this plugin to a newer v1.0.2 and it works on phpBB 3.1.10, AND it no longer breaks your SSL!

Cheers to HiFiKabin's efforts! :wub:

P.S. Stay tuned for the release of Moon Phases 1.0.2! I was lucky enough to be the test site and the first to have it working on SSL! GO https://forums.thetopfew.com
World of Phaos RPG online is making it's come back! Play free now!
Check out phpBB contributions & extension downloads. :P
kaspir
Registered User
Posts: 203
Joined: Sun Jul 27, 2008 5:05 am
Name: Greg
Contact:

Re: Just went SSL, now this plugin is not Secured.. how to f

by HiFiKabin » Tue Nov 15, 2016 1:37 pm

Thanks for testing Greg. Hopefully it will be stable through the month and if so it will be released and submitted to the CDB as usual
User avatar
HiFiKabin
Community Team Member
Community Team Member
Posts: 3984
Joined: Wed May 14, 2014 9:10 am
Location: Swearing at the PC, UK
Name: James
Contact:

Re: Just went SSL, now this plugin is not Secured.. how to f

by dudijo » Wed Sep 06, 2017 9:56 am

I had the same problem, a year? later, and how amazing, the problem ist already solved.

Thanks for the good job! I love the moon on my site.

mooni
dudijo
Registered User
Posts: 1
Joined: Wed Sep 06, 2017 7:26 am
Contact: