WeBid Support - Modifications http://www.webidsupport.com/forums/ Get support for and discuss modifications that have been created for WeBid here. en Thu, 09 Sep 2010 05:47:36 GMT vBulletin 60 http://www.webidsupport.com/forums/images/misc/rss.png WeBid Support - Modifications http://www.webidsupport.com/forums/ SSL Mod to get it working for 1.0.0 r.267 and possibly 1.0.0 release http://www.webidsupport.com/forums/showthread.php?2679-SSL-Mod-to-get-it-working-for-1.0.0-r.267-and-possibly-1.0.0-release&goto=newpost Sat, 04 Sep 2010 18:17:48 GMT *Title*: SSL certificate Mod for making fully secure padlock *Version(s)*: 1.0.0 r.267 and prior *Credits*: Box Lot *Install Time*: 30-60 minutes... Title: SSL certificate Mod for making fully secure padlock
Version(s): 1.0.0 r.267 and prior
Credits: Box Lot
Install Time: 30-60 minutes
Install Difficulty: medium (should be easy)
Description:
This one is a summary of me talking to myself here and solving my own issues. As it stands with 1.0.0 r.267 the SSL support is a little more then flipping the Admin. switch. Since there is enough to do currently for the 1.0.0 release this may still be the case with the 1.0.0 release so here are the summarized steps to get your SSL padlock without issues for Home page, register, login and Sell page.


If you have done extensive editing prior to getting your certificate you may need to make further edits.

Basically all http should be https on secure pages. Viewing your pages document source with your browser will help find the stragglers you may have hard coded yourself. Here is how to take care of the WeBid created ones.

First make this change (previously suggested by Renlok) to the header.php file:
Quote:
in header.php find

PHP Code:
'SITEURL' => $system->SETTINGS['siteurl'],


and replace with

PHP Code:
'SITEURL' => ($_SERVER['HTTPS'] != 'on') ? $system->SETTINGS['siteurl'] : $sslurl,
Second check any edits in index.php that may include template variables with $system->SETTINGS['siteurl'] in them and change those to $system->SETTINGS['https_url']

Third check your /themes/YOUR THEME/home.tpl, global_header.tpl and global_footer.tpl for any references that include http and change those to https. This includes simple things like a facebook link or other add-on you may have that utilizes an outside URL. Most/all sites should resolve things for clicks to a site without SSL but some add-ons with specific http and http only links will break.

Now if you're using Captcha for your security you need to edit /includes/secureimage.php.
Again, all occurances of $system->SETTINGS['siteurl'] should be changed to $system->SETTINGS['https_url']

However, with the CKeditor currently your lock will show warnings about mixed (http & https) information. The quick fix to this one is to replace the CKeditor with the old FCKeditor (available at the Editor development site if you don't have an old WeBid package, it's in 0.8.5) and change the calls to the editor in Sell.php (search for "editor", having an 0.8.5 sell.php for the edits will make it fast).



NOTE: To date I have been unable to figure out why the CKeditor breaks and frankly right now I have little interest in "learning" the CKeditor. It would be great if someone could look into this and why there is some connection to something non-SSL like "http...". Until then my plan is to keep my FCKeditor in place.

Demo: Sorry, no demo ]]> Modifications Box Lot http://www.webidsupport.com/forums/showthread.php?2679-SSL-Mod-to-get-it-working-for-1.0.0-r.267-and-possibly-1.0.0-release