The following warnings occurred:
Warning [2] Undefined property: MyLanguage::$archive_pages - Line: 2 - File: printthread.php(287) : eval()'d code PHP 8.2.30 (Linux)
File Line Function
/inc/class_error.php 153 errorHandler->error
/printthread.php(287) : eval()'d code 2 errorHandler->error_callback
/printthread.php 287 eval
/printthread.php 117 printthread_multipage



Madison Motorsports
Insecure / Unencrypted Logins - Printable Version

+- Madison Motorsports (https://forum.mmsports.org)
+-- Forum: Official (https://forum.mmsports.org/forumdisplay.php?fid=5)
+--- Forum: Site Suggestions/Status (https://forum.mmsports.org/forumdisplay.php?fid=15)
+--- Thread: Insecure / Unencrypted Logins (/showthread.php?tid=11890)

Pages: 1 2

Insecure / Unencrypted Logins - Senor_Taylor - 10-14-2019

Whatever is the least amount of upkeep and effort should be what's done.



Sent from my Pixel 3 XL using Tapatalk

RE: Insecure / Unencrypted Logins - Senor_Taylor - 07-15-2020

Since no one is moving on this, I paid $40 for a cert since this hosting service doesn't support free ones. Working on getting it applied to the forum, but this isn't really made for power users so I don't think I have a way to do that myself either. i have a ticket open with the hosting service.

RE: Insecure / Unencrypted Logins - Senor_Taylor - 07-20-2020

The SSL cert should be applied to forum.mmsports.org. Not sure how long it'll take to show up

RE: Insecure / Unencrypted Logins - Senor_Taylor - 07-20-2020

Okay, so https://Forum.MMSports.org should be working for those folks that want encrypted traffic, however I have no access to the MyBB control panel to enable SSL for everything, so the CSS and everything will be coming through unencrypted and your browser will still say insecure.

[Image: q4Rvm07.jpg]

RE: Insecure / Unencrypted Logins - Senor_Taylor - 07-20-2020

Alright, everything should be redirecting and SSL should be enabled for all forums pages. This however did break the link to the font package we use. I'm not sure where that link is from. If I can find it, all I have to do is change it to HTTPs and we should be good to go.

RE: Insecure / Unencrypted Logins - dean - 07-20-2020

(07-20-2020, 03:34 PM)Senor_Taylor Wrote: Alright, everything should be redirecting and SSL should be enabled for all forums pages. This however did break the link to the font package we use. I'm not sure where that link is from. If I can find it, all I have to do is change it to HTTPs and we should be good to go.


<head>
...
<link href="//maxcdn.bootstrapcdn.com/font-awesome/4.1.0/css/font-awesome.min.css" rel="stylesheet">
<link href="http://fonts.googleapis.com/css?family=Source+Sans+Pro" rel="stylesheet" type="text/css">
...
</head>

These two are in the head section of the site, and changing them to https://maxcdn... and https://fonts.google... in the inspect element console brought back the fonts for me. Not sure of the backend for this, but if you have access to the HTML, changing that should make it good to go.

Insecure / Unencrypted Logins - Senor_Taylor - 07-20-2020

Exactly, yeah. I've been trying to figure out where those are called from. I checked the CSS files, check the theme settings for the WordPress site and the forum itself. No luck so far.

Sent from my Pixel 3 XL using Tapatalk

RE: Insecure / Unencrypted Logins - dean - 07-20-2020

(07-20-2020, 04:35 PM)Senor_Taylor Wrote: Exactly, yeah. I've been trying to figure out where those are called from. I checked the CSS files, check the theme settings for the WordPress site and the forum itself. No luck so far.

Sent from my Pixel 3 XL using Tapatalk

Ah I got you now. 
Code:
@import url(https://fonts.googleapis.com/css?family=Source+Sans+Pro);

Since you have access to the CSS, this may work, not sure if the <link> will override it or not.

RE: Insecure / Unencrypted Logins - Senor_Taylor - 07-20-2020

(07-20-2020, 04:47 PM)dean Wrote:
(07-20-2020, 04:35 PM)Senor_Taylor Wrote: Exactly, yeah. I've been trying to figure out where those are called from. I checked the CSS files, check the theme settings for the WordPress site and the forum itself. No luck so far.

Sent from my Pixel 3 XL using Tapatalk

Ah I got you now. 
Code:
@import url(https://fonts.googleapis.com/css?family=Source+Sans+Pro);

Since you have access to the CSS, this may work, not sure if the <link> will override it or not.

Finally found where it was. MyBB Control Panel -> Templates -> Ungrouped templates -> headerinclude 

That contains all of the stuff called in the head of the HTML 

https://community.mybb.com/thread-93450.html

RE: Insecure / Unencrypted Logins - Senor_Taylor - 07-21-2020

This change broke Tapatalk. Looking into fixing that now.

RE: Insecure / Unencrypted Logins - Jake - 07-21-2020

(07-20-2020, 04:47 PM)dean Wrote: Since you have access to the CSS, this may work, not sure if the <link> will override it or not.

DEAN. You're a student and have exposed yourself as being good at internet things. Any interest in helping maintain the website and forum? We really could use someone on the student side to own all of this. Taylor and I are busy.

Taylor - thank YOU for doing all this SSL stuff. Glad to see the little padlock in my browser.

RE: Insecure / Unencrypted Logins - Senor_Taylor - 07-21-2020

Jake thank YOU for paying for this forum to run for all of these years. I'd like to see more student usage of the forums.

RE: Insecure / Unencrypted Logins - Apoc - 07-21-2020

What's the page impression count over the last few years? It seems like even the usual suspects have mostly disappeared, in favor of group chat.

RE: Insecure / Unencrypted Logins - Jake - 07-21-2020

(07-21-2020, 11:45 AM)Apoc Wrote: What's the page impression count over the last few years? It seems like even the usual suspects have mostly disappeared, in favor of group chat.

LOL you think I bothered to set up analytics on any of this

RE: Insecure / Unencrypted Logins - Apoc - 07-21-2020

Web hosts usually track impressions without the need to add third part analytics. For mine, it's found in server stats or some such shit.

RE: Insecure / Unencrypted Logins - Senor_Taylor - 07-21-2020

(07-21-2020, 01:09 PM)Apoc Wrote: Web hosts usually track impressions without the need to add third part analytics. For mine, it's found in server stats or some such shit.

I'll whip up something

[Image: NSW3huL.png]

[Image: 3rl3UT3.png]

[Image: RYsc4Fc.png]

RE: Insecure / Unencrypted Logins - Senor_Taylor - 07-21-2020

Threw it in excel to make a line graph

[Image: xaAT52r.png]

RE: Insecure / Unencrypted Logins - dean - 07-21-2020

(07-21-2020, 09:04 AM)Jake Wrote: DEAN. You're a student and have exposed yourself as being good at internet things. Any interest in helping maintain the website and forum? We really could use someone on the student side to own all of this. Taylor and I are busy.

Sure! I'd be happy to help out.

RE: Insecure / Unencrypted Logins - Apoc - 07-21-2020

[Image: 2dsDiZH.png]

Page views in 2019 was down about one third before corona sent everyone back here in March this year. The falloff isn't as extreme as it feels given the same half dozen topics are really the only ones that get activity. I guess there are just a lot of lurkers.