SSL and unauthorized content

[mox]

Hi,
after search the board and follow some trick, I'm always in the same situation.
But, the conf

Cms Version: 1.8.2

Installed Modules:

    * CMSMailer: 2.0
    * FileManager: 1.0.2
    * MenuManager: 1.6.5
    * ModuleManager: 1.4
    * News: 2.10.6
    * nuSOAP: 1.0.2
    * Printing: 1.1.0
    * Search: 1.6.5
    * ThemeManager: 1.1.1
    * TinyMCE: 2.7.2
    * Calendar: 0.8.2
    * CGExtensions: 1.21.2
    * CGFeedMaker: 1.0.11
    * FormBuilder: 0.6.4
    * avplayer: 1.3
    * FrontEndUsers: 1.12.5
    * FormBrowser: 0.3.2
    * SelfRegistration: 1.6.7
    * CustomContent: 1.7.3
    * SiteMapMadeSimple: 1.2.1

My client buy an SLL certificate and it's successfully installed on the domain via Plesk panel.
My first try was simply to check on the page that I want to serve via https the corresponding option;
the page contain only a tag to a complex form.

IE show always the warning about unauthorized content, and my client stuck.

I try with the info in http://wiki.cmsmadesimple.org/index.php ... PS_to_work, but it's old and, anyway, don't resolve the issue.

In second istance I try only this in config.php:

Code: Select all

#Document root as seen from the webserver.  No slash at the end
#If page is requested with https use https as root url
#e.g. http://blah.com
$config['root_url'] = 'http://www.domain.com';

#SSL URL.  This is used for pages that are marked as secure.
$config['ssl_url'] = 'https://www.domain.com';
if(isset($_SERVER['HTTPS']) && $_SERVER['HTTPS']!='off')
{
$config['root_url'] = $config['ssl_url'];
}

like this post [SOLVED] said -> http://forum.cmsmadesimple.org/index.ph ... 216.0.html

But, nothing.
IE always tell me about a problem with unauthorized content.

The other issue is that, when I enter in the https page, every link generate from cmsms, also the link in the menu, become https, and this is not good, because the other page don't required https specific.

Someone have idea?
Any help is appreciated

Thank
Maurizio

[NaN]

IE show always the warning about unauthorized content

Did you check your stylesheets for urls?
http://forum.cmsmadesimple.org/index.ph ... #msg230845

The other issue is that, when I enter in the https page, every link generate from cmsms, also the link in the menu, become https, and this is not good, because the other page don't required https specific.

I guess this is fixed in CMSms 1.9.1

[mox]

Did you check your stylesheets for urls?
http://forum.cmsmadesimple.org/index.ph ... #msg230845

Sometimes the best thing to do is to do nothing, and reflect...
Yes, control the url in the css do the trick.

I guess this is fixed in CMSms 1.9.1

Now I can't try 1.9.1, first because a UDT and some java script inside the form.
There aren't nothing else to do?

Thanks
Maurizio

[NaN]

Sorry, but the only way to fix the https issue is to modify the core.
In 1.8.2 the https stuff is done with kind of a hack: If the current page uses https the core temporarily changes the root url to the SSL url. So all functions that create a link will use https regardless if the target needs https.
In 1.9 this has been changed at many different places. Even the redirect stuff has been changed in 1.9.1. I cannot tell you if it would be easy to apply this to 1.8.2.
Anyway altough this would be a core modification to adapt something that already is in the (new) core i'm not sure if this is the right place to talk about such modifications.

[mox]

Thank you NaN,
your explanation it's clear.
I plan an upgrade on a test environment in this day.
I will keep you informed if everything goes the right way.

Ciao
Maurizio