Announcement

Collapse
No announcement yet.

Changing to an https site

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Mrs blueskyracer
    replied
    Thank you for the support Mark B.! Everything appears golden at this time. ~Teresa

    Leave a comment:


  • Mark.B
    replied
    Ok I think we're done.


    All the redirects are sorted too.
    The site can only now be accessed by the actual URL as set in the admincp which is https://domain.net/forums/

    Any variants - such as https://www.domain.net/forums/ or http://domain.net/forums/ or http://www.domain.net/forums/ will all redirect to https://domain.net/forums/

    One side effect of this is that users who were logged in using one of the now-redirected URLs, will find they need to log in again. There's no way round this.

    I've also upgraded the site to 5.5.5.

    Everything now shows as secure and everything should work.

    Leave a comment:


  • Mark.B
    replied
    Originally posted by Mrs blueskyracer View Post

    Mark I have started the support ticket. Looking forward to getting this all buttoned up. ~Teresa
    I'm working on this now.

    Mostly sorted actually, just tidying up a couple of things and getting you onto 5.5.5.

    Leave a comment:


  • Mrs blueskyracer
    replied
    Originally posted by Mark.B View Post
    Have you raised a support ticket about this? I don't see anything on your account since October. As you have a support package you shouldn't be referred to the forums.

    If you would care to raise a ticket we will have a look at this as this seems to be taking too long to sort for what should be a fairly simple change.

    We'll need admin access and ftp credentials in the ticket please.
    Mark I have started the support ticket. Looking forward to getting this all buttoned up. ~Teresa

    Leave a comment:


  • Mark.B
    replied
    Have you raised a support ticket about this? I don't see anything on your account since October. As you have a support package you shouldn't be referred to the forums.

    If you would care to raise a ticket we will have a look at this as this seems to be taking too long to sort for what should be a fairly simple change.

    We'll need admin access and ftp credentials in the ticket please.

    Leave a comment:


  • Mrs blueskyracer
    replied
    Ok, so I have adjusted the .htaccess file in Notepad++ and I will upload it FTP to replace the old htaccess file which I will rename Old.htaccess. I have edited the banner ads that show on my home page to reflect https. I am still concerned that the log in screen that has to be used by all logging into the site will go poof again if I follow the original directions to convert to an https site. Also the control panel "freaked out" and became unusable last time. It was like it lost all formatting. Surely that can't be a result of my banner ads? (hydroracer.net)

    Leave a comment:


  • In Omnibus
    replied
    Have you edited the .htaccess file to remove the # symbols from the following code?

    #To redirect users to the secure version of your site, uncomment the lines below
    #RewriteCond %{HTTPS} !=on
    #RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R=301,L]

    You may also want to try forcing https by adding the following to your .htaccess file:

    RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

    Leave a comment:


  • Mrs blueskyracer
    replied
    Wayne, am I understanding this correctly, if I cannot convert to https because of my advertising banners (personal site ones not google ads), custom avatars and pictures that users have uploaded. I have fixed the advertising that I have control over, I think. I don't know what to do about the pictures and avatars. While I have had this vbulletin forum for 11 years I have never had the need to make it https, now I do. I am honestly asking for direction and I thought this was what the 6 month support package that I paid for would help me do. When I have started a ticket I am simply referred to the forum for answers. So far I find no reason to have the support if it doesn't get me any help. PLEASE can someone give me some direction here. Thank you in advance.

    Leave a comment:


  • Wayne Luke
    replied
    If any resources are accessed from HTTP, even your logo, you will not be able to secure your site. In addition to the logo, this includes files from third-party addons, images uploaded by other users, custom avatars not uploaded to your site and so forth.

    Looking at your site, your advertising banners are using HTTP. These images are security risks and allow the siphoning of user data. This is why your site will not go secure.

    You can use HTTPS resources with an HTTP site but not the other way around.

    Leave a comment:


  • Mrs blueskyracer
    replied
    I have still not been able to secure my site. I have followed (as I stated above) the instructions to the letter. Someone out there must have an idea of why doing this is breaking the login and the control panel making both unusable.

    Leave a comment:


  • Mrs blueskyracer
    replied
    Originally posted by Mark.B View Post
    May be an obvious question, but have you had your host install a valid certificate? As that is needed.

    Assuming that's the case, please follow our guide and ensure every single relevant step is followed:
    https://forum.vbulletin.com/articles...forum-to-https
    Hi Teresa,
    >
    > There is already an active SSL certificate so all you should need to do is update your vBulletin forum settings to use https instead of http. Here are the instructions I found for updating the forum to use https:
    >
    > vBulletin 5
    > Go to vBulletin Options > vBulletin Options > Site Name / URL / Contact Details.
    > Edit these three settings: 'vBulletin URL'; 'Login URL'; 'Core URL' and add the 's' into the URL.
    > For example, if your URL is
    http://www.contoso.com/forum
    , change it to
    https://www.contoso.com/forum
    > NOTE: Do not remove the word 'core' at the end of the core URL. You will break your site!
    >
    > Then go to Settings > Options > Server Settings & Optimization Options > Use Remote jQuery
    > Set this to Google.
    >
    > The key to all three vBulletin versions is that all you do in the URL settings is change http to https. Do not alter any other part of the URL.
    >
    > Once you have changed these settings, go to AdminCP > Maintenance > General Update Tools, and rebuild the styles.
    >
    > If you would like us to take care of this for you please provide the vBulletin admin URL and credentials otherwise please let us know if you need any further assistance. Thank you.

    These are the directions that I followed which proved to break the site as far as the log in screen no longer working and the Admin Control Panel becoming unusable. I followed these directions to the letter. (I am unsure why I paid for 6 months of support when I am always directed to the forum to solve issues.)

    Leave a comment:


  • Mark.B
    replied
    May be an obvious question, but have you had your host install a valid certificate? As that is needed.

    Assuming that's the case, please follow our guide and ensure every single relevant step is followed:
    https://forum.vbulletin.com/articles...forum-to-https

    Leave a comment:


  • Mrs blueskyracer
    replied
    Cloudflare is not active according to the host, in fact it is not installed. Any other ideas? When I do the https then my admin panel becomes unusable also. I had to have the host restore the site from a backup.

    Leave a comment:


  • Wayne Luke
    replied
    It is a proxy server provided by your hosting provider and you would have to ask them how to access it or turn it off. The software doesn't use it by default.

    Leave a comment:


  • Mrs blueskyracer
    replied
    Wayne, What is Cloudflare and how to I access it?

    Leave a comment:

Related Topics

Collapse

Working...
X