Insecure / Unencrypted Logins

Senor_Taylor · 10-14-2019, 10:18 AM

Whatever is the least amount of upkeep and effort should be what's done.

Sent from my Pixel 3 XL using Tapatalk

Senor_Taylor · 07-15-2020, 02:17 PM

Since no one is moving on this, I paid $40 for a cert since this hosting service doesn't support free ones. Working on getting it applied to the forum, but this isn't really made for power users so I don't think I have a way to do that myself either. i have a ticket open with the hosting service.

Senor_Taylor · 07-20-2020, 11:35 AM

The SSL cert should be applied to forum.mmsports.org. Not sure how long it'll take to show up

Senor_Taylor · (This post was last modified: 07-20-2020, 01:53 PM by Senor_Taylor.)

Okay, so https://Forum.MMSports.org should be working for those folks that want encrypted traffic, however I have no access to the MyBB control panel to enable SSL for everything, so the CSS and everything will be coming through unencrypted and your browser will still say insecure.

[Image: q4Rvm07.jpg]

Senor_Taylor · 07-20-2020, 03:34 PM

Alright, everything should be redirecting and SSL should be enabled for all forums pages. This however did break the link to the font package we use. I'm not sure where that link is from. If I can find it, all I have to do is change it to HTTPs and we should be good to go.

dean · (This post was last modified: 07-20-2020, 04:35 PM by dean.)

(07-20-2020, 03:34 PM)Senor_Taylor Wrote: Alright, everything should be redirecting and SSL should be enabled for all forums pages. This however did break the link to the font package we use. I'm not sure where that link is from. If I can find it, all I have to do is change it to HTTPs and we should be good to go.

<head>
...
<link href="//maxcdn.bootstrapcdn.com/font-awesome/4.1.0/css/font-awesome.min.css" rel="stylesheet">
<link href="http://fonts.googleapis.com/css?family=Source+Sans+Pro" rel="stylesheet" type="text/css">
...
</head>

These two are in the head section of the site, and changing them to https://maxcdn... and https://fonts.google... in the inspect element console brought back the fonts for me. Not sure of the backend for this, but if you have access to the HTML, changing that should make it good to go.

Senor_Taylor · 07-20-2020, 04:35 PM

Exactly, yeah. I've been trying to figure out where those are called from. I checked the CSS files, check the theme settings for the WordPress site and the forum itself. No luck so far.

Sent from my Pixel 3 XL using Tapatalk

dean · 07-20-2020, 04:47 PM

(07-20-2020, 04:35 PM)Senor_Taylor Wrote: Exactly, yeah. I've been trying to figure out where those are called from. I checked the CSS files, check the theme settings for the WordPress site and the forum itself. No luck so far.

Sent from my Pixel 3 XL using Tapatalk

Ah I got you now.

Code:
@import url(https://fonts.googleapis.com/css?family=Source+Sans+Pro);

Since you have access to the CSS, this may work, not sure if the <link> will override it or not.

Senor_Taylor · 07-20-2020, 09:19 PM

(07-20-2020, 04:47 PM)dean Wrote:
(07-20-2020, 04:35 PM)Senor_Taylor Wrote: Exactly, yeah. I've been trying to figure out where those are called from. I checked the CSS files, check the theme settings for the WordPress site and the forum itself. No luck so far.

Sent from my Pixel 3 XL using Tapatalk

Ah I got you now.

Code:
@import url(https://fonts.googleapis.com/css?family=Source+Sans+Pro);

Since you have access to the CSS, this may work, not sure if the <link> will override it or not.

Finally found where it was. MyBB Control Panel -> Templates -> Ungrouped templates -> headerinclude

That contains all of the stuff called in the head of the HTML

https://community.mybb.com/thread-93450.html

Senor_Taylor · 07-21-2020, 08:56 AM

This change broke Tapatalk. Looking into fixing that now.

***Jake*** · 07-21-2020, 09:04 AM

(07-20-2020, 04:47 PM)dean Wrote: Since you have access to the CSS, this may work, not sure if the <link> will override it or not.

DEAN. You're a student and have exposed yourself as being good at internet things. Any interest in helping maintain the website and forum? We really could use someone on the student side to own all of this. Taylor and I are busy.

Taylor - thank YOU for doing all this SSL stuff. Glad to see the little padlock in my browser.

Senor_Taylor · 07-21-2020, 09:38 AM

Jake thank YOU for paying for this forum to run for all of these years. I'd like to see more student usage of the forums.

Apoc · 07-21-2020, 11:45 AM

What's the page impression count over the last few years? It seems like even the usual suspects have mostly disappeared, in favor of group chat.

***Jake*** · 07-21-2020, 01:01 PM

(07-21-2020, 11:45 AM)Apoc Wrote: What's the page impression count over the last few years? It seems like even the usual suspects have mostly disappeared, in favor of group chat.

LOL you think I bothered to set up analytics on any of this

Apoc · (This post was last modified: 07-21-2020, 01:11 PM by Apoc.)

Web hosts usually track impressions without the need to add third part analytics. For mine, it's found in server stats or some such shit.

Senor_Taylor · (This post was last modified: 07-21-2020, 01:52 PM by Senor_Taylor.)

(07-21-2020, 01:09 PM)Apoc Wrote: Web hosts usually track impressions without the need to add third part analytics. For mine, it's found in server stats or some such shit.

I'll whip up something

[Image: NSW3huL.png]

Senor_Taylor · (This post was last modified: 07-21-2020, 01:57 PM by Senor_Taylor.)

Threw it in excel to make a line graph

[Image: xaAT52r.png]

dean · 07-21-2020, 02:29 PM

(07-21-2020, 09:04 AM)Jake Wrote: DEAN. You're a student and have exposed yourself as being good at internet things. Any interest in helping maintain the website and forum? We really could use someone on the student side to own all of this. Taylor and I are busy.

Sure! I'd be happy to help out.

Apoc · (This post was last modified: 07-21-2020, 03:10 PM by Apoc.)

Page views in 2019 was down about one third before corona sent everyone back here in March this year. The falloff isn't as extreme as it feels given the same half dozen topics are really the only ones that get activity. I guess there are just a lot of lurkers.

Login




Remember me Lost Password?