Https Protocol Request

[Raven<Nabble>]

It looks like your forum is using different pages to the usual ones. Eg if you go to the NAML link on your homepage, it's view_category, while my test forum is view_standard. It may be an older template that's not the default anymore or different settings, I'll have to look into it.

[Harvey]

Is this because of customizations?

I have done a lot (Hugo did it) to make the forum more reasonable on mobile.  Can we keep that stuff?  

You see I eliminate a bunch of columns to make it fit on a phone.

If you fix the issues quickly I would be willing to pay a reasonable sum.

[Harvey]

So it looks like you pushed me to https.

Can you update status?  I had asked to stay at http until "last post" was fixed. Now if you revert to http I will have to walk a few hundred members through "how to clear your cache" again.

Don't do anything yet just tell me what is going on so I can understand.

Unless of course that anything is fixing last post. That is the priority.

[Raven<Nabble>]

The status is that I don't know how to fix it yet.

[Harvey]

OK keep me in the loop.

If you think it is going to be a long time, push me back to http, as I need "last post" to work.

But before doing it let me know what you think.

Thx.

[Harvey]

Another bug:

The MOVE POST feature doesn't work.

It actually does move the post, but when you are done moving it, the screen doesn't return you to the previous page so it seems like it hasn't worked.

Let me know if you understand what I am saying.

[Harvey]

Another bug:

Same seems to be true with the "Email Poster" feature.  Not sure it the email is going to the person, but it "seems" like when you click the button nothing happens.

[h3rb1x]

Hello Harvey,

The below is just a suggestion, but as you can tell it's frustrating to test issues on a live site without negatively impacting users. 

Create a "test" forum and restore a backup of your "live" forum into it. 

1. Create a new CName record and Enable https on the test forum 

2. Ensure that all of your test forum embedded links have "https://" instead of the relative path. 

Example: https://testforum.site.tld

3. Allow the forum to be viewed without embedding (basically disabled the forced nabble re-direct). I know it's ugly when users

"break out" of the iframe but it helps in testing. 

4. Allow, your site visitors (if possible) to view your site *both* with or without https and no forced re-directs. Example: 

http://www.site.tld

https://www.site.tld

5. Disable any scripts that force URL redirection on the forum links. 

Basically what you will be looking for (both with and without embedding) and making a note of is:

- Forum links that don't default to https

 

- Mixed content errors (this will be obvious if your site is visited via "http" only)

- Loading and display errors / issues. 

- Poke around to see what works and what doesn't. 

The main goal would be to find out if the issue is with the embedding or something else. Without making changes to your main site and thus affecting users. 

My own testing reveals that images are not getting updated to use "https" and this causes the mixed content error with or without embedding. 

I also found links that display "http" however, when clicked they actual go to the "https" location. 

[Harvey]

Not sure how to replicate my forum as it has been customized a lot.

[Harvey]

Raven I'm thinking I should go back to http to get my functionality back. Forum members are not happy.

Is it helping you to find a solution?  If not I guess flip me back.  Forum is barely functional the way it is.

[Raven<Nabble>]

Ok.
Haven't found a solution yet.
Can I get a confirmation that you're ready to go back?

[Harvey]

Can we do it in the morning?  I can post when ready.

What time zone are you in?

[Raven<Nabble>]

Yes that's fine.
My time zone is Melbourne/AEDT/UTC+11.

[Harvey]

Here is what we are seeing as the issue. When I go to https://nyskiblog.com/forums/ I get back what looks like a working forum. However is you click any of the links in the Last Post column they fail due to a mixed content warning.  Specifically in the Chrome Inspector JavaScript console you get:

Mixed Content: The page at 'https://nyskiblog.com/forums/' was loaded over HTTPS, but requested an insecure resource 'http://forum.nyskiblog.com/Pico-Feb-March-Redemption-tp4123778p4130078.html'. This request has been blocked; the content must be served over HTTPS.

If I inspect and change the link

http://forum.nyskiblog.com/Pico-Feb-March-Redemption-tp4123778p4130078.html

to

https://forum.nyskiblog.com/Pico-Feb-March-Redemption-tp4123778p4130078.html

There is no warning and everything works as expected.

Can you force an https in front of the URLs instead of http? I think that will resolve all of our problems, but I can't verify without this change completed. However looking around I don't see any other broken links.

[h3rb1x]

I don't have the issue that Harvey is having. 

However, all of the images uploaded to my forum are still linked to the http causing the mixed content error. 

This is what I see when I view the source and the inspector:

<img src="http...

Now, I am unable to make any changes manually since the images, when uploaded have the below code:

<nabble_img src="....

Looks to me that "nabble_img" needs to be updated globally not just "forced" to use https. 

Hopefully that hint helps the developers. 

[Raven<Nabble>]

Harvey
That much I know already.
I thought you wanted to revert? I'm waiting on you to give me the go-ahead to revert. I'll try and reproduce the issue on my test forums.

h3rb1x
Queued for fixing

[Harvey]

Raven<Nabble> wrote

Harvey
That much I know already.
I thought you wanted to revert? I'm waiting on you to give me the go-ahead to revert. I'll try and reproduce the issue on my test forums.

I spoke to my developer about the switch. He said "wait, post this first."  The post above came from him.  Basically he inspected element, added the "s" to the link and it worked.

Can you explain to me why we can't isolate that link and force it to be https?

I will reconnect with him today to see if he is ready to revert, but I would like to know the answer to the above question. I'm sure he will want to know too.

[Raven<Nabble>]

Harvey
Last post appears to be working now, but you should check that this change hasn't broken anything.

I changed a section of the overridden macro last_post_column from:

<n.smart_post_link.url>
    <text.when_created.short_format/>
</n.smart_post_link.url>

to the default:

<n.smart_post_link>
    <text.when_created.short_format/>
</n.smart_post_link>

[Harvey]

Ravel what do you think that override was supposed to do?

It has something to do with hidden forums? What is "smart?"

[Harvey]

I just did a test post.

When I went to delete it I got this:



The only link in that screen that was clickable was the nabble support link.

I will look for more issues.