https and images

[Steph Jensen]

Hello!

I am currently messing with security, and setting the site up to run with https

i am getting an error on the browser though, that this site is not entirely secure because of things like images. Can you help me out with this?

[jair101]

You need to redirect all http requests to your site to https. The images on the homepage, even though they are hosted on your server, are loaded over http, which the browser detects as insecure. 

[Steph Jensen]

ok great @jair101 that makes sense.

Is there an easy way to do this or a setting to change that automatically does this?

[jair101]

1 minute ago, Steph Jensen said:

ok great @jair101 that makes sense.

Is there an easy way to do this or a setting to change that automatically does this?

You need to modify the configuration of your webserver. What kind of webserver do you use, apache or nginx? Do you have some control panel like Cpanel?

[-FP]

If the images are hosted on your server through the suite and not manually linked but you recently switched to https (also modified config.php go change the url to https), you should clear the cache throgh te ACP support tool and all image urls should be updated.

[opentype]

You need to identify how the http images are called in the first place. Is it post content? Theme images? Manual calls e.g. in custom code blocks. Each require different actions. There is not one action or setting that fixes all image over https problems. 

[Steph Jensen]

36 minutes ago, jair101 said:

You need to modify the configuration of your webserver. What kind of webserver do you use, apache or nginx? Do you have some control panel like Cpanel?

Not sure about this... I have a little server control through some admin interface over at the host, and seems like full ftp access to root.
Might have support help me out with this maybe...

34 minutes ago, -FP said:

If the images are hosted on your server through the suite and not manually linked but you recently switched to https (also modified config.php go change the url to https), you should clear the cache throgh te ACP support tool and all image urls should be updated.

I'll give this a try and see if it helps.
Just a few questions:

edit the config.php = you mean the global_config.php correct?

i manually have to update all images to https?

27 minutes ago, opentype said:

You need to identify how the http images are called in the first place. Is it post content? Theme images? Manual calls e.g. in custom code blocks. Each require different actions. There is not one action or setting that fixes all image over https problems. 

Thanks!

I have no idea what all this means, but sounds like it's not just a switch in the admin to resolve this.
Will wait for support to get back to me

[Jim M]

 

2 hours ago, Steph Jensen said:

Just a few questions:

edit the config.php = you mean the global_config.php correct?

conf_global.php is the file name and located in the root of your installation directory for IPS. You'll just want to edit the URL to be https rather than http. Likely this will resolve all problems for images uploaded via the suite, proper theme includes, etc... 

If you've manually added images to your theme using HTML (e.g. <img src="..." /> ) then these will need to be updated manually as the system is not able to make changes to these. It would be suggested to update these to be using theme resources, just a helpful hint to avoid issues like this. If you are unsure what this means or have a third party theme, no need to worry  

If you have external images that you've copy/pasted into your post/article/block/etc... you'll want to enable "Serve images from local server?" in ACP -> System -> Posting.

[Steph Jensen]

@opentype i actually found out that a plug in that you offer support for, is the only image that is not being loaded through https on the page!

It's the fallback image for Supergrid feed of forum discussions. I went in and tried to update this in the plugin options to a https url, but it does not change on the front end, even after clearing cache (both on the site and browser). Any ideas what could be wrong here?

[opentype]

Just change the fallback link in this case. If you don’t see the result instantly, it is because the blocks get cached for a couple of minutes (ACP setting). 

[Steph Jensen]

1 minute ago, opentype said:

Just change the fallback link in this case. If you don’t see the result instantly, it is because the blocks get cached for a couple of minutes (ACP setting). 

Great thanks!

Will give it half an hour and check back to check it later