Current issues with "all SSL" for Dee-Nee
- Tapatalk needs to be deleted and re-added
- Old YouTube vids don't embed
Appears we have an avatar issue ... the forum software is prepending the forum avatar directory URL in front of external URLs. That is, it's using http://forums.dee-nee.com/avatars/http://nightwulf.rbicentral.com/nightwolf-sel.gif
for my avatar URL. Not seeing where to fix this in settings and not sure how switching to https would cause this ...
Been fucking with it as the avatar was the only thing loading via http and not https. Was hand-editing the php files but I think I changed them all back after I found the proper spot to chnage https avatar loads in the admin settings. See if it's still happening.
Now it's back to "partially encrypted" jesus christ - how can it be so hard to make this software load everything via https?
OK now fully https but see if it's happening again. The culprit may be line 3236 of Subs.php wulf, copy/pasted that from an SMF community post. so maybe it's not doing something properly. If I don't change that line the main avatar doesn't load https
Admin -> forum -> attachments and avatars -> avatar settings to specify the default URL; it's showing https now.
If you gave me ssh access after moving the server home, I'm not aware of it, so unable to look at Subs.php. Using the default Subs, and https specified in admin settings as above, no avatars are loaded? What's the HTML look like in the img tag?
Didn't think of this before, but you might run into mixed content warnings. That is, if the whole page is https but it's loading my avatar from (http) nightwulf.rbicentral.com, that might generate a "do you want to load only the secure content" popup. The real answer here might be to enable the feature that downloads external avatars to the server and then serves locally.
Yeah I changed it to https but I still need to make the Subs.php change here for it to work:
http://www.simplemachines.org/community/index.php?topic=485755.msg3401177#msg3401177 (http://www.simplemachines.org/community/index.php?topic=485755.msg3401177#msg3401177)
I'll set you up with an account and text the login info shortly.
I didn't look at mixed content enough but I think the error that bug the users are only if you mix http & https within your own domain. Otherwise no forum/blog/whatever website that lets you load otehr peoples images, youtube, etc would be usable via https without really bugging the user.
Avatars set to https in admin and loading the site fully https, changed Subs.php back to original code, but the edited one is still there and commented out. Avatars still fucked up if linked to outside, wonder if I edited something and forgot about it.
Copied the whole block of code dealing with avatars to a text editor to properly format it so I can fkn read it. People bitch about perl being hard to read, then they scribble out PHP without any proper use of braces and rely on seemingly random use of tabs to show program flow. HATE.
I don't think the lines you're modifying in Subs.php are the issue; think that's for the avatar of the user rather than the poster. Looking through Display.php, might be a project for tomorrow ...
I think you are right about that, my avatar giving me issues with http and not https was my own.
The "Jump to" area to pick your board also acting flaky
It's gotta be in Load.php:
'image' => $profile['avatar'] == '' ? ($profile['id_attach'] > 0 ? '<img class="avatar" src="' . (empty($profile['attachment_type']) ? $scripturl . '?action=dlattach;attach=' . $profile['id_attach'] . ';type=avatar' : $modSettings['custom_avatar_url'] . '/' . $profile['filename']) . '" alt="" />' : '') : (stristr($profile['avatar'], 'https://') ? '<img class="avatar" src="' . $profile['avatar'] . '"' . $avatar_width . $avatar_height . ' alt="" />' : '<img class="avatar" src="' . $modSettings['avatar_url'] . '/' . htmlspecialchars($profile['avatar']) . '" alt="" />'),
Don't ahve an ssh session but check modify date on that file, maybe I manually added some https in there, but I'm pretty sure I backed up the original file and copied back when it didn't help.
Actually I just changed (stristr($profile['avatar'], 'https://') to http instead of https and the avatars are back. I need to figure out exactly what that may break, or if it even makes sense, but avatars came back. Will figure all that out tomorrow.
Avatars seem bigger. Is that just me?
Still hardcoded to 75x75, so just you. I think.
Quote from: Reds on 10/07/13, 09:33:16 PM
Avatars seem bigger. Is that just me?
Did you shave around the edges?
So it looks like two things they perform similarly (the Jump to: button and the ability to modify the post on the same page) behave the same way - brings up a banner that says "Loading" and then doesn't do anything. I'll have to check those out later today.
Fuck quoting doesn't work either, won't have time til later to properly look at.
More brainstorming - quick community search says Display.template.php handle all three broken functions (quoting, jump to, quick modify) yet it's happening for both themes and they have different files.
Tried both themes and mutiple browsers, same issue.
I searched for the sandwich thread and found it just fine.
HOPE THAT HELPS!
thx
tapatalk doesn't seem to be working at all, gantry. hth.
Can someone with the iPhone/Pad version of Tapatalk verify if it's working or not?
Quote from: Gantry on 10/08/13, 11:22:47 AM
Can someone with the iPhone/Pad version of Tapatalk verify if it's working or not?
Posting from iOS Tapatalk. I even used the "quote" function!
OK then we need all tapatlk users to checkin, maybe the problem is android only.
For what it's worth, the "Quote" script still appears broken on Firefox.
Quote from: BeefMaster on 10/08/13, 11:44:56 AM
For what it's worth, the "Quote" script still appears broken on Firefox.
OK so if I disable quick reply in Profile -> Modify Profile -> Look and Layout, then it does quote on the "post reply" page. I wonder if baines/rdub don't have quick reply set and that's why it worked for them.
Android phone.
Failed to connect to forum etc etc etc.
Pretty sure tapatalk killed the dinosaurs, and now it has its sight set on the Dee-Nee forums.
Great Gantry. Now you've doomed us all.
Nothing in error logs for AJAX stuff but quick mod gives this in access log:
10.1.10.1 - - [08/Oct/2013:13:01:29 -0500] "GET /index.php?action=quotefast;quote=904613;modify;xml HTTP/1.1" 200 263
Jump to
10.1.10.1 - - [08/Oct/2013:13:02:17 -0500] "GET /index.php?action=xmlhttp;sa=jumpto;xml HTTP/1.1" 200 332
Separated the logs between http & https to see what's connecting with what. My Tapatalk which isn't work is doing http instead of https which is why I'm guessing it isn't working, doesn't like the redirect code.
None of the non-functioning AJAX stuff appears to be using http which is good - so we may have an issue not related to http. Wonder if nightwulf's changed caused it?
OK reverted nightwulf's change, no difference.
I don't like that these URL's for the AJAX stuff has semicolons in them. Copy/pasting that URL above gives a weird XML parse error. Also shows that error right by the self-avatar load which was one of the last things I switched from http to https. Something is goofy, has to be a change I made.
Quote URL when a quick reply is set:
10.1.10.1 - - [08/Oct/2013:13:41:41 -0500] "GET /index.php?action=quotefast;quote=904640;xml HTTP/1.1" 200 423
Looks like semicolons are legit for use to separate variables/fields as it is here, so that ain't the issue. SMF Function DB for the quick quote:
http://support.simplemachines.org/function_db/index.php?action=view_function;id=335 (http://support.simplemachines.org/function_db/index.php?action=view_function;id=335)
Don't think it's a coincidence that all these functions use local javascript to function properly.
Ok tapatalk people with issues will probably have to delete the forums from the Tapatalk app and readd
Can't figure out how to delete the forums
Keep going back until you see the forums, then tap & hold and remove
Stop giving orders.
YouTube imbeds also not working
Appears to be the mixed http/https content, quickly realizing that making this site https is too much of a fucking pain to deal with.
Started a checklist on post #1
FF is now telling me the page is only "partially encrypted," which I'm strongly assuming is due to non-https avatars. Thinking storing those locally is really the only way to fix that.
Supported in SMF out of the box; just have to enable the option and the forum downloads external avatars then treats them like avatars uploaded by the user.
I don't care if we don't see the lock, as that will come up whenever we link to an outside pic as well. If it's easy to do we can enable for avatars though. Probably best...
I care about the mixed content errors with youtube because it bugs the user (on IE) and blocks youtube from being displayed on most/all browsers.
Going to disable the other youtube plugin and try this Simple Youtube Video Embedder/BBC, the readme is bigger than the xml file of code changes. We'll keep the discussion off the youtube.com thread.
Actually if I'm hacking that mod to add https from SMF discussion thread adding other sites can't be too tricky. Short term having youtube will be best, discussion thread so I can quickly reference it.
http://www.simplemachines.org/community/index.php?topic=507505.0 (http://www.simplemachines.org/community/index.php?topic=507505.0)
So that mod doesn't support youtube links embedded in URL tags, which is what the other mod used. Well that fkn blows, I'll try to reinstall the other one but it's WAY more complicated.
Test new mod anyway:
http://www.youtube.com/watch?v=Df6Rfsi6zSY
This is the most riveting fucking thread in dee nee history.
It's like watching a Korean mystery movie without subtitles on. You aren't entirely sure whats happening, but you cant stop watching.
One more test of http links, should embed https:
http://www.youtube.com/watch?v=-i-Scb9vlaM
So that part was easy, teaching the mod to embed all the existing url=youtube.com codes is the next step.
So I found a mod I was hoping would work out of the box, but no dice. It could display youtube links in url= format, but no "force https" option. And since there's so much fkn code it'll take forever for me to figure out. Back to the simple, youtube only one.
https test
https://www.youtube.com/watch?v=Df6Rfsi6zSY
I like the embed mod you're using now. Doesn't support the multitude of sites the other one did, but I don't think anyone was using them anyway.
Quote from: Reds on 10/08/13, 06:33:37 PM
This is the most riveting fucking thread in dee nee history.
It's like watching a Korean mystery movie without subtitles on. You aren't entirely sure whats happening, but you cant stop watching.
You hit the nail on the head. I did not understand one single post by Gantry and nightwolf, but highly anticipated their next post.
Quick edit works, was broken by some debug code I put in to track down the avatar issue. May have fixed others as well.
Quote from: nightwulf on 10/08/13, 08:35:33 PM
I like the embed mod you're using now. Doesn't support the multitude of sites the other one did, but I don't think anyone was using them anyway.
Yeah the other one was crufty and causing issues and had to be hand removed. Gotta make it break down the url tags but I should be able to make that work after learning some php and how this stuff works. When I do I'll edit the original mod and save a custom copy, no hand editing the php files.
Quote from: nightwulf on 10/08/13, 08:44:41 PM
Quick edit works, was broken by some debug code I put in to track down the avatar issue. May have fixed others as well.
POOYAN!!! All 3 AJAXy things now working again.
This is a test quick reply ...
Edit: looks good. I added some code to insert commented out HTML with a few variables to track down where the avatar URL was being changed. Removed it, fixed now, my apologies. Shout out to HttpFox (https://addons.mozilla.org/en-US/firefox/addon/httpfox/) which helped find the XML error in about 8 seconds, easily the most useful Firefox add-on outside of Adblock.
Quote from: DÄrky on 10/08/13, 08:43:05 PM
Quote from: Reds on 10/08/13, 06:33:37 PM
This is the most riveting fucking thread in dee nee history.
It's like watching a Korean mystery movie without subtitles on. You aren't entirely sure whats happening, but you cant stop watching.
You hit the nail on the head. I did not understand one single post by Gantry and nightwolf, but highly anticipated their next post.
I concur.
Quote from: nightwulf on 10/08/13, 08:46:37 PM
This is a test quick reply ...
Edit: looks good. I added some code to insert commented out HTML with a few variables to track down where the avatar URL was being changed. Removed it, fixed now, my apologies. Shout out to HttpFox (https://addons.mozilla.org/en-US/firefox/addon/httpfox/) which helped find the XML error in about 8 seconds.
Not only does quick quote work now, showed your edit even though it wasn't in the main display. I'll have to check out httpfox, because the Chrome Debugger wasn't showing any errors. Then again maybe I didn't know where to look
It's totally my fault, but I still am surprised at the fragility of XML. At least in the context of ajax ...
Switched to Curve to make sure everything works here too. Still like the old YaBB theme better.
ur crazy - I even tried "core" out and fixed the https issues with that when debugging. What a shitheap that theme is
Quote from: Gantry on 10/08/13, 08:49:34 PM
I'll have to check out httpfox, because the Chrome Debugger wasn't showing any errors. Then again maybe I didn't know where to look
Seriously, like 8 seconds.
(http://31.media.tumblr.com/tumblr_lvjo24RVj61qcpgr3o1_500.gif)
Already installed, though I'm a little out of practice with all this stuff. I never realized how often I used "Jump to" until it was broken.
Auto-download avatars set, but it looks like if they had it set before it doesn't download. Will change new aviators to test.
they auto-download
For old users, I can click on the user, go into their profile and save the settings without changing anything. after that it's a local file. Not perfect but doable, just like Nacho's mom
TACO CAT
Saving old users profiles can fuck up the scaling though, sorry de snorry Darky :-\
AAAAND in some cases it just gives them no avatar, looks like rdub is changing his look
AAAAND it breaks animated gifs, so Malnu is out of commission, I think I'll stop now.
Quick perusal of SMF forums say if they have to resize an animated gif it becomes a png and loses animation. That's enough problems, users can link to their avatars again.
Taco Cat was a test, but I think it stays
Quote from: Gantry on 10/08/13, 09:11:13 PM
Saving old users profiles can fuck up the scaling though, sorry de snorry Darky :-\
Can you dumb this down a bit, have no idea what you are talking about? Please say it has nothing to do with Gino.
Your avatar picture got a little smooshed
Quote from: Gantry on 10/09/13, 10:32:08 AM
Your avatar picture got a little smooshed
Didn't even notice until you mentioned it. I sure hope that Gino's avatar is intact.
Quote from: Gantry on 10/08/13, 02:26:34 PM
Keep going back until you see the forums, then tap & hold and remove
Tried this in the ME section and it didn't work.
What's the ME section? What didn't' work?
i did the update and now it works. thanks g man!
:love:
What happened to the avatars boooo
???
They're here on tapatalk but gone on desktop.
You broke it.
Does anyone but dum dum here have any issues with broken aviators?
Aviators are fine here.
Work here no problem.
Two week ban for mclane seem appropriate then?
At least
Probably should be longer than arod, huh?
LIFE
His or someone elses?
yes.
Nine hours passed before Gantry's response to my inquiry. Interesting.
Some of us go to bed after 11pm their time on a weekday. Question my mettle, will you?
I tried to post a pic using tapatalk and it said image sharing wasn't authorized using the app
I'm sure you were all quite nervous about the huge OpenSSL security vulnerability that was disclosed and don't you worry - we are patched and free from the Heartbleed attack. But no I'm not getting a new SSL cert...
I may take some time tonight and see if I can get Perfect Forward Secrecy (http://en.wikipedia.org/wiki/Forward_secrecy) working because it's the best way to do thing. And fuck the NSA
So Apache 2.2 doesn't support PFS, the dream is over.
Quote from: Gantry on 04/08/14, 07:37:08 PM
So Apache 2.2 doesn't support PFS, the dream is over.
http://www.youtube.com/watch?v=OLK5ZOjWaXE
He means Apache the web server lol!
OMG i'm so embrassded!
;D ;D ;D ;D ;D ;D ;D ;D ;D ;D ;D ;D ;D ;D ;D ;D ;D ;D ;D ;D >:( ;D ;D ;D ;D ;D ;D ;D ;D ;D ;D :'( :thumbsup: :thumbsup: :thumbsup: :thumbsup:
I had a stileproject.com t-shirt, loved that thing. Was a XXL though and let it go.
PS - I have a new internal hard drive for backup purposes, so we're going down again today for 5-10 minutes. Though I'm not saying when.
Time is now fuckers, see you in 20
I noticed something.
Mike D, hat tip to you for that post 8)
Three blue screens, and Office 2013 SP1 is barfing, hooray to Windows 8.1 update 1!
I've noticed over the last couple of days that the "new post" notification icons have been randomly disappearing. I'll click on a "new" icon to get to the most recent post in one thread. But when I go back to the category, all of the "new" icons on that page are gone.
Quote from: fightonusc on 04/18/14, 12:45:51 PM
I've noticed over the last couple of days that the "new post" notification icons have been randomly disappearing. I'll click on a "new" icon to get to the most recent post in one thread. But when I go back to the category, all of the "new" icons on that page are gone.
Me too
Haven't seen that here, will keep an eye out
DeeNee has been loading very slow on my phone lately. The rest of my web browsing appears to be normal though. One particular thing that is annoying as fuck is when you open a new post thing, it goes to the top of page of the new post then after a few seconds scrolls down to the first new post.
Is this still with the WM version of Tapatalk? If so try browsing without it. I've seen no speed issues personally, phone or computer.
Theres a wrestlemania version of tapatalk?