Jump to content

Suggestions and feedback


SchizoidFreud
 Share

Recommended Posts

  • 4 months later...
  • 3 weeks later...
7 hours ago, GoobyPlz said:

Unable to leave feedback, it throws an error saying invalid topic. Captcha passes fine.

 

Q4tqwf4.jpg

You need to type the topic,  while you do,  a drop box will show and then you need to select the appropriate topic. 

  • Thanks 1
Link to comment
Share on other sites

  • 4 weeks later...

Hey!

 

All Most links on the forums (for internal navigation) are hardcoded to "http" links, so even when you're forcing the https version (SSL) every click will take you back to the http version of the site.

 

Logging into the site also requires you to transmit your credentials over HTTP. As far as I remember this was not the case a few months ago.

 

Sending passwords over HTTP is a security risk and could lead to compromise of user data, and even the forums (if admin passwords get snooped).

Edited by oxalorg
Link to comment
Share on other sites

11 minutes ago, oxalorg said:

All links on the forums are hardcoded to "http" links, so even when you're forcing the https version (SSL) every click will take you back to the http version of the site.

2

 

Hmm, not true. 

 

The https:// link in your signature isn't redirected to http:// 

Link to comment
Share on other sites

1 hour ago, Joe Cool said:

 

Hmm, not true. 

 

The https:// link in your signature isn't redirected to http:// 

 

Correct. Sorry I meant most internal navigations links (not user generated ones) are hardcoded to use the entire url like "http:// .... ". (Some urls like the forum image src attribute correctly uses the protocol which is currently being used to access the page)

 

Also there are no redirects in place. So you can manually force a page to show the https version, but ideally that should show all internal links in the same protocol of https, but it doesn't and hardcodes the  forum navigation links to http.

 

If an html link is coded like this:

 

Quote

<a href="/forums/">

or

<a href="{{ protocol }}{{ url }}/forums/"> // templated syntax to dynamically generate entire urls by the forum engine

then it will automatically use the protocol used to access the current page (which should translate to https://..../forums if you're viewing in https)

 

but something like this will always load the http version

Quote

<a href="http://domain.com/forums/">

 

---

 

I think the fix to this must be some simple setting somewhere. Not sure just guessing :fear:

Edited by oxalorg
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...