News: Go to the front page portal to create a Torchmodders account | Visit the wiki!
November 21, 2018, 02:46:00 PM
collapse

*
Information

Please contribute to our


Sign up for a forum account at the Front Page. | Remember to Tag your posts.
Having problems logging in to the forums? Go the front page, log out and back in again.

Author Topic: HTTPS?  (Read 712 times)

Offline Urakka Amyx

  • Common
  • *
  • Posts: 30
    • View Profile
HTTPS?
« on: August 27, 2018, 05:13:04 AM »
Was curious as to why torchmodders isn't https. one major benefit of it being so, is you would be able to direct link images from https sites such as imgur and even steam. Saves bandwidth as well. and if you have access to SSH you could do it absolutely free.

https://letsencrypt.org/getting-started/

Just curious is all. :)

Edit: Ive never done it without SSH, but apparently theres a no SSH method as well.
« Last Edit: August 27, 2018, 05:14:47 AM by Urakka Amyx »

Offline steffire3

  • Mod_Seeker, Balance_Researcher, Person_Listener.
  • Rare
  • *
  • Posts: 210
  • Country: us
  • I am more active on the Steam Workshop Discussions
    • status busy
    • View Profile
  • Mood: mood smiley
Re: HTTPS?
« Reply #1 on: August 27, 2018, 06:34:55 AM »
Perhaps it's a limitation of the Forum build used? I copy pasted the bottom page info and Xml with Php were mentioned when highlighted.

SMF 2.0.15 | SMF © 2011, Simple Machines
SimplePortal 2.3.5 © 2008-2012, SimplePortal
Orange Line by, Hostflare
XHTML RSS WAP2
At this point after playing Torchlight 2 for 4 years original and modded... ignorant of mods and now wise with compatibility... the one thing I value the most-

-is being able to have "support" from the author of any mod.

I think the only advice I can give is that you don't burn yourself out. ^_^

Offline Urakka Amyx

  • Common
  • *
  • Posts: 30
    • View Profile
Re: HTTPS?
« Reply #2 on: August 27, 2018, 02:21:11 PM »
Perhaps it's a limitation of the Forum build used? I copy pasted the bottom page info and Xml with Php were mentioned when highlighted.

SMF 2.0.15 | SMF © 2011, Simple Machines
SimplePortal 2.3.5 © 2008-2012, SimplePortal
Orange Line by, Hostflare
XHTML RSS WAP2

Yeah. Maybe, but SMF has the ability for it.

Host flare shows something weird OMG!! Shoes!! :P

Offline steffire3

  • Mod_Seeker, Balance_Researcher, Person_Listener.
  • Rare
  • *
  • Posts: 210
  • Country: us
  • I am more active on the Steam Workshop Discussions
    • status busy
    • View Profile
  • Mood: mood smiley
Re: HTTPS?
« Reply #3 on: August 27, 2018, 08:57:32 PM »
Host flare shows something weird OMG!! Shoes!! :P


We must never underestimate the usefulness of shoes...

Which calls for the creation of a Variant Shoe Mod... 'cause players just gotta have access to bling their shoes!  :D
At this point after playing Torchlight 2 for 4 years original and modded... ignorant of mods and now wise with compatibility... the one thing I value the most-

-is being able to have "support" from the author of any mod.

I think the only advice I can give is that you don't burn yourself out. ^_^

Offline Lord Nyriox

  • Developer
  • Rare
  • *
  • Posts: 135
  • Country: us
    • status busy
    • View Profile
    • Github Profile
  • Mood: mood evil
Re: HTTPS?
« Reply #4 on: August 27, 2018, 11:11:48 PM »
EDIT:  You obviously have much more technical knowledge than I, in this matter, @Urakka Amyx.

Therefore, I will endeavor to keep my ill-informed nonsense, in this thread, to a minimum. 



Was curious as to why torchmodders isn't https.

I meant to bring this subject up with @Phanjam and @Wolven anyway, so I will simply mention my findings here. 

Torchmodders actually does have an HTTPS option—but there is no automatic redirect for it. 

Also, posting while using HTTPS, somehow redirects to a non-HTTPS address afterward.  However, I also get other weird errors while doing so—something like:
Code: [Select]
This form is not secure.  Are you sure you want to submit it?
(Note that neither error shows up when using normal HTTP.) 


By the way, this is the HTTPS address for this forum thread:
https://torchmodders.com/forums/suggestions-feedback/https/

Click on it, and check the address-bar of your browser.  You should see "https://" instead of the normal "http".

If the website lacked a valid HTTPS certificate, you would have received an error, when clicking that link.


« Last Edit: August 28, 2018, 09:19:54 AM by Lord Nyriox »

Offline Urakka Amyx

  • Common
  • *
  • Posts: 30
    • View Profile
Re: HTTPS?
« Reply #5 on: August 28, 2018, 12:52:54 AM »
EDIT:: didnt realize id typed so much :P sorry for the book, but i hope it provides you with some good info.

^_^ ahh no problem at all and technically while it is https, its not secured.. more than likely its because there are files probably being loaded not hosted by a https source.

Let me have a look ::looks at security audit logs for site::

Yep thats the problem

Quote

This page is not secure.

Resources - mixed content
This page includes HTTP resources.


Reload the page to record requests for HTTP resources.

Certificate - valid and trusted
The connection to this site is using a valid, trusted server certificate issued by Let's Encrypt Authority X3.
View certificate

Connection - secure (strong TLS 1.2)
The connection to this site is encrypted and authenticated using TLS 1.2 (a strong protocol), ECDHE_RSA with P-256 (a strong key exchange), and AES_128_GCM (a strong cipher).


Umm based on what i can find

wiki/lib/exe/fetch.php?media=wiki:logo.png

Which i beleive is the torchmodders wiki logo its being pulled from (http) while on (https)
easy fix is either making a php script such as
Code: [Select]
<img link="<?php (isset($_SERVER['HTTPS']) ? "https://" : "http://").$_SERVER['HTTP_HOST'];?>torchmodders.com/wiki/lib/exe/fetch.php?media=wiki:logo.png"> 

with css styling
Code: [Select]
<img link="<?php (isset($_SERVER['HTTPS']) ? "https://" : "http://").$_SERVER['HTTP_HOST'];?>torchmodders.com/wiki/lib/exe/fetch.php?media=wiki:logo.png"  alt="" class="bbc_img"> 

and placing it on the page which displays the logo.

The above will place http or https depending on what is typed in the url. not necessary, but its effective

also, theres a lot of different ways, maybe even more secured ways... but thats a easy fix for a easy problem.

http://i.imgur.com/BIZBIWm.png

That is the logo for the forums, wierd its not hosted here. buut simply change the url link to https, since imgur supports https nativly. its the same url.


But yeah also if theres not automatic redirect, you could force the page to redirect by using


Code: [Select]
if(empty($_SERVER['HTTPS']) || $_SERVER['HTTPS'] == "off"){
    $redirect = 'https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
    header('Location: ' . $redirect);
    exit();
}

a little basic but this code would work as well

describing that code

if $_SERVER['HTTPS'] is empty or $_SERVER['HTTPS'] is equal to off(meaning they went to http)
go here ('https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];)
https://    torchmodders.com(HTTP_HOST)  /forums/suggestions-feedback/https/(REQUEST_URI)"
« Last Edit: August 28, 2018, 01:06:09 AM by Urakka Amyx »

Offline Urakka Amyx

  • Common
  • *
  • Posts: 30
    • View Profile
Re: HTTPS?
« Reply #6 on: August 28, 2018, 08:43:44 PM »
EDIT:  You obviously have much more technical knowledge than I, in this matter, @Urakka Amyx.
Therefore, I will endeavor to keep my ill-informed nonsense, in this thread, to a minimum. 

:) nah, not nonsense. Its always a good thing to have a conversation. Everyone wins. Learning experience for all :) besides ive done stuff like this for a living ^_^ freelancing FTW  :D

Offline steffire3

  • Mod_Seeker, Balance_Researcher, Person_Listener.
  • Rare
  • *
  • Posts: 210
  • Country: us
  • I am more active on the Steam Workshop Discussions
    • status busy
    • View Profile
  • Mood: mood smiley
Re: HTTPS?
« Reply #7 on: August 30, 2018, 12:56:27 AM »
EDIT:  You obviously have much more technical knowledge than I, in this matter, @Urakka Amyx.
Therefore, I will endeavor to keep my ill-informed nonsense, in this thread, to a minimum. 

:) nah, not nonsense. Its always a good thing to have a conversation. Everyone wins. Learning experience for all :) besides ive done stuff like this for a living ^_^ freelancing FTW  :D


We appreciate all the help we can get for coding / scripting! (My skill is in art and gathering info from discussions one day making Guides hopefully such as listing TL2 bug fixes for Linux which will require some careful gathering).

If your skill can be applied for UI issues being encountered in mod projects for Aherin and Korzeam then it would be a huge boon for the community.

As well as helping us with Https efficiency on the Site.  :)
At this point after playing Torchlight 2 for 4 years original and modded... ignorant of mods and now wise with compatibility... the one thing I value the most-

-is being able to have "support" from the author of any mod.

I think the only advice I can give is that you don't burn yourself out. ^_^

Offline Urakka Amyx

  • Common
  • *
  • Posts: 30
    • View Profile
Re: HTTPS?
« Reply #8 on: August 30, 2018, 07:14:01 AM »

We appreciate all the help we can get for coding / scripting! (My skill is in art and gathering info from discussions one day making Guides hopefully such as listing TL2 bug fixes for Linux which will require some careful gathering).

If your skill can be applied for UI issues being encountered in mod projects for Aherin and Korzeam then it would be a huge boon for the community.

As well as helping us with Https efficiency on the Site.  :)

Well, While Im always up for more things to code, I fear that my lack of .. experience with TL2 modding would be a bit off. Not that i wouldnt try, however i dont have a linux VM atm (Limited data plan >_>)

As far as the site goes, Ive got loads and loads of snippets from my free lance projects, so if i can help out, or if you need a php script done. Ill do it, ^_^
« Last Edit: August 30, 2018, 07:20:11 AM by Urakka Amyx »

Offline Wolven

  • Operator
  • Unique
  • *
  • Posts: 336
  • Country: no
    • status mod
    • View Profile
  • Mood: mood smiley
Re: HTTPS?
« Reply #9 on: August 30, 2018, 05:31:41 PM »
HI. HTTPS is enabled on this site, but i guess it defaults to HTTP. I'll poke around the hosting settings and see if I can force it to use HTTPS as default.

https://torchmodders.com/forums/

Offline Urakka Amyx

  • Common
  • *
  • Posts: 30
    • View Profile
Re: HTTPS?
« Reply #10 on: August 30, 2018, 06:40:38 PM »
Also note that even though HTTPS may be enabled, you wont have the Green HTTPS until you remove non secure sources. such as the the wiki logo. So you many just need to change the img a href to https instead of http

Tags:
 

* Quick Search


* Member Information

 
 
Welcome, Guest. Please login or register.
Did you miss your activation email?

* Mod Boards Activity

* Who's Online

  • Dot Guests: 15
  • Dot Hidden: 0
  • Dot Users: 0

There aren't any users online.

* Calendar

November 2018
Sun Mon Tue Wed Thu Fri Sat
1 2 3
4 5 6 7 8 9 10
11 12 13 14 15 16 17
18 19 20 [21] 22 23 24
25 26 27 28 29 30

No calendar events were found.

* Recent Topics

Skills Expansion: Bugs Report & Ideas by Sch123
[Today at 09:48:25 AM]


Pet Variants Mod by Sch123
[November 18, 2018, 11:52:56 AM]


Equipping Weapon *Visual* to Pet? by Phiengley
[November 17, 2018, 07:03:40 AM]


Hello! by Phanjam
[November 10, 2018, 03:57:42 AM]


(Solved)Help Editing Vanilla Class (adding / taking out other vanilla Skills) by Lrv
[November 07, 2018, 05:05:55 PM]


[TL2] Ultimate Respec Lite by doudley
[November 04, 2018, 08:17:27 AM]


Torchlight Frontiers announced by Kva3imoda
[November 03, 2018, 11:10:58 PM]


Fate Items by Phanjam
[November 03, 2018, 11:10:17 PM]


FEP+ by Sch123
[November 02, 2018, 09:03:12 AM]


Skills on weapons by Sch123
[October 29, 2018, 11:15:59 AM]


Medea Pet to Class by Vkoslak
[October 26, 2018, 07:41:19 PM]


[Tool] Item Unit file maker Script by Anarch16sync
[October 26, 2018, 04:13:27 PM]


Notepad++ Custom Language File (Syntax Highlight) by Lord Nyriox
[October 26, 2018, 12:08:33 AM]


Mod Package and Publish Error by DragonDawn
[October 24, 2018, 02:31:03 PM]


Looking for Modder to Collaborate on Character Design by Exqzr
[October 23, 2018, 08:15:56 AM]

* Popular Topics