Post Reply 
 
Thread Rating:
  • 0 Votes - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
Insecure link on log in page
08-19-2012, 07:22 AM (This post was last modified: 08-19-2012 07:49 AM by revrora.)
Post: #1
Insecure link on log in page
Hi,
I have just installed the latest version of weberp, but the login page is now insecure due to an insecure link. http://sflogo.sourceforge.net/sflogo.php...949&type=8 directing to http://sourceforge.net/projects/web-erp/

What's the best way to get round this?

Keep up the good work!

Trevor
Find all posts by this user
Quote this message in a reply
08-20-2012, 07:01 AM
Post: #2
RE: Insecure link on log in page
(08-19-2012 07:22 AM)revrora Wrote:  Hi,
I have just installed the latest version of weberp, but the login page is now insecure due to an insecure link. http://sflogo.sourceforge.net/sflogo.php...949&type=8 directing to http://sourceforge.net/projects/web-erp/

What's the best way to get round this?

Keep up the good work!

Trevor

I've sorted it myself now. Navigated to "weberp/includes/footer.inc" and changed the urls in the following string from http to https.

<div style="text-align:center"><a href="https://sourceforge.net/projects/web-erp"><img src="https://sflogo.sourceforge.net/sflogo.php
Find all posts by this user
Quote this message in a reply
08-20-2012, 02:07 PM
Post: #3
RE: Insecure link on log in page
Hi,
//////////////////////////////////////////////////////////////////////////////////////
//////////////////////////////////////////////////////////////////////////////////////
<?php

if($_SERVER["HTTPS"] != "on")
{
$newpage = "https://". $_SERVER["SERVER_NAME"] . $_SERVER["REQUEST_URI"];
header("Location: $newpage");
exit();
}

?>
//////////////////////////////////////////////////////////////////////////////////////
//////////////////////////////////////////////////////////////////////////////////////

Put this php script in top of the index.php.

Best Regards
Samu
Find all posts by this user
Quote this message in a reply
08-22-2012, 04:36 AM
Post: #4
RE: Insecure link on log in page
Hi Samu,
That's an elegant solution, however for me, login will always be encrypted as I have a perminant redirect from http to https. Therefore I think just changing the offending url is enough.
Kind Regards
Trevor
Find all posts by this user
Quote this message in a reply
08-27-2012, 10:07 AM
Post: #5
RE: Insecure link on log in page
changed in svn to https

Phil Daintree
webERP Admin
Logic Works Ltd
http://www.logicworks.co.nz
Visit this user's website Find all posts by this user
Quote this message in a reply
Post Reply 


Forum Jump:


User(s) browsing this thread: 1 Guest(s)