CMS MADE SIMPLE FORGE

CMS Made Simple Core

 
Back Back to List

[#5454] Navigating from a "Use HTTPS for this page" to a normal page will not use http.

avatar
Created By: John Moore (jomoweb)
Date Submitted: Tue Sep 21 15:38:57 -0400 2010

Assigned To:
Version: 1.8.2
CMSMS Version: None
Severity: Major
Resolution: Fixed
State: Closed
Summary:
Navigating from a "Use HTTPS for this page" to a normal page will not use http.
Detailed Description:
Step 1. Navigate or enter directly to a page marked to use https.

Step 2. Navigate to any other normal "http" page through the menu or a relative
link.

Step 3.  The page you just navigated to will still have "https" as the protocol
and not "http" as it should. Notice: Most browsers now show an error about the
secure page containing no-secure items...

Step 4.  Navigate back to that original "https" page.  Notice that page now has
the secure items on non-secure page error.


History

Comments
avatar 
Date: 2010-09-21 19:30
Posted By: Georg Busch (nan)

 
I just reproduced it on a localhost and can confirm that.
If you request a https page all items on your page will also have https. Even if
they do not lead to a https page.

The config root_url is set to the config ssl_url once you entered a secure page.
But it won't be set back if you enter a none ssl page. (i'm not sure if changing
the config root_url on runtime is a good idea here)
So you're not able to leave the ssl stuff once you entered it and the CMS is
just not able to get the right urls of its own pages anymore. (this is why i
think changing the root_url on runtime is no good idea because even
$content_obj->GetUrl() will fail - what imho should always return the right url
like a canonical. Or did i misunderstand the pupose of that function?)
avatar 
Date: 2010-09-21 20:33
Posted By: Robert Campbell (calguy1000)

Yes, I am aware that this is a bug in 1.8.2  (it's fixed in 1.9)

There was actually an argument about that modification to the root_url method. 
I didn't like it.
in 1.9 I've since removed that 'hack', and solved the problem properly.
avatar 
Date: 2010-09-21 22:45
Posted By: Robert Campbell (calguy1000)

This however WILL NOT affect relative links that you create using the wysiwyg
editor... relative links are just that... relative.

I recommend you always use absolute links.
avatar 
Date: 2010-11-11 01:56
Posted By: Ronny Krijt (ronnyk)

1.9 is released.
Updates

Updated: 2010-11-11 01:56
state: Open => Closed

Updated: 2010-09-21 20:34
resolution_id: 5 => 7

Updated: 2010-09-21 20:33
resolution_id: => 5