|
Forum: Site Suggestions and Help
03-13-2017, 01:28 AM
|
| |
Unfortunately I have no way to mass-move your attachments, but updating existing image links, at least on the forum, shouldn't be too hard. I can do a global find and replace once you have a new hosting platform for existing images.
If you upload to an album, it's pretty easy to add your photos to a forum post- just look for the  icon in the quick reply editor, or "insert album photos" below the smilie box in the full editor.
If you want to add SSL to your existing site, it no longer has to be costly (i.e. it's free): SSL For Free - Free SSL Certificates in Minutes
All http links on the forum will automatically be converted to https.
BTW, loyal site supporters enjoy unlimited attachment space :)
|
|
Forum: Site Suggestions and Help
03-12-2017, 07:51 PM
|
| |
Refer to this first post of this thread, then blame Rupert :p
|
|
Forum: Site Suggestions and Help
02-08-2017, 11:52 AM
|
| |
The photo looks good this time!
|
|
Forum: Site Suggestions and Help
02-08-2017, 01:25 AM
|
| |
Do you have the profile option set to allow non-secure images (the current default)?
And yes, use IMG tags- I'm seeing URL tags in your post.
|
|
Forum: Site Suggestions and Help
02-07-2017, 08:26 PM
|
| |
I'd recommend it in the long term, though it's likely that photobucket will eventually switch over. Until then, make sure you use http instead of https links and the photos will load.
|
|
Forum: Site Suggestions and Help
02-06-2017, 09:08 PM
|
| |
Yup, if you still have old cookies on your system, this could certainly cause forced logouts.
|
|
Forum: Site Suggestions and Help
02-06-2017, 06:59 PM
|
| |
The system should be working fine now. Are you blocking any cookies?
The next time you get kicked out, please PM me the list of cookie names in your browser (those that start with bb, such as bbuserid). I don't need to know the contents.
|
|
Forum: Site Suggestions and Help
01-30-2017, 02:09 PM
|
| |
The logout issue should now be fixed guys, just be sure to log out and in again one more time.
|
|
Forum: Site Suggestions and Help
01-30-2017, 02:08 PM
|
| |
Nice catch. The google searches should be back to working again!
|
|
Forum: Site Suggestions and Help
01-30-2017, 02:36 AM
|
| |
So I decided to stay up late to address this atrociousness. I can't believe nobody else has released out a modification to stop vbulletin from putting passwords in cookies after all these years, because it really is fairly trivial.
A side-effect of this redesign is that all existing persistent cookies will no longer work, so everyone will have to log in again.
|
|
Forum: Site Suggestions and Help
01-29-2017, 06:54 PM
|
| |
If you redirect http to https via 301, embedded files will still be shown.
|
|
Forum: Site Suggestions and Help
01-29-2017, 06:51 PM
|
| |
You're right, but that's how vBulletin implements it. Convenient I guess, but kind of scary.
Yes, they are all being rewritten.
|
|
Forum: Site Suggestions and Help
01-29-2017, 04:44 PM
|
| |
As long as your server redirects http to https, all old links will continue working.
Furthermore, we will automatically and globally convert http to https in embedded images on the forum, so you won't have to go back and change those links.
Correct. You can already test this behavior by changing the HTTP image preference in your options.
Essentially, any insecure images will be replaced by a link that reads "click here to view photo".
Odds are that the hosting service will also make the move over to HTTPS sooner rather than later if it doesn't do so already. Who do you use?
In case they do not, then your inline images will turn in to clickable links starting next year. The actual timing of this change will depend in part on how quickly the photo hosting industry transitions to SSL.
Note that hosts such as google, flickr, facebook, smugmug, and others already serve secure images.
To be clear, any insecure photos would still be accessible via a link, and that link will automatically be displayed.
In case those photos start being hosted securely later on, they will magically reappear.
This is also why I'd like to encourage everyone to use our attachment system and albums. Photos hosted on the forum are guaranteed to stick around, even in really old threads :)
|
|
Forum: Site Suggestions and Help
01-29-2017, 04:37 PM
|
| |
The problem with this is that your session cookies will still be sent to you over HTTP, so an attacker would be able to get access to your username and a hash of your password, OR the session ID if you're not using "remember me". Remember that security is only as strong as the weakest link in the chain.
By the end of this month, Chrome will start labeling any HTTP site as "insecure" if it contains password fields anywhere on the page, and this would have applied to PF.
You're correct in assuming that most major HTTP websites will probably be making the move to SSL in the near future, so it's a good idea to start looking at options.
There are many shared web hosts that provide you with free SSL via their subdomain if you do not want to purchase or set up your own certificate (i.e. netfirms). But I think it would be easiest for you to just use a free photo hosting service such as google drive, flickr, etc. for your files. You can also use our attachment and album systems, since your quotas are pretty high as a reseller.
Any old embedded http images will automatically be converted to https on our forum. If they cannot be retrieved securely, then they will be replaced by a link. However, if you later end up implementing SSL on the site hosting those images, you will not need to update your old posts on PF and the photos will start loading again.
|
|
Forum: Site Suggestions and Help
01-28-2017, 10:12 PM
|
| |
I'm happy to announce that as of last night, we've transitioned the entire forum and homepage to the secure HTTPS protocol. HTTPS protects you while browsing by encrypting the connection between your browser and our server. This greatly reduces the risk of password theft, eavesdropping, etc. Even through PF doesn't directly handle sensitive data, the extra layer of security never hurts— and it's something the whole industry is now encouraging.
Previously, only parts of our site (such as the login system) were run via HTTPS.
Attachment 341756
What does this mean for you?
The extra layer of security is seamless; no further action is needed by you to enable it. All old HTTP forum links will automatically redirect to their secure counterparts.
If you experience broken functionality or see formatting errors on forum pages, perform a hard refresh (usually control+F5) and/or clear your browser cache. The login box on the homepage may not work until you do so. Tapatalk users may need to clear their app cache.
Important: Posting off-site photos on the forum
Some externally-hosted photos that our members post (using IMG tags) are not hosted on secure servers. Currently, these photos will still be displayed on the forum, but this is subject to change. Also, such photos may trigger a message/icon stating that the page is "not fully secure", such as in the screenshot below:
Attachment 341757
We have created a new account option that allows you to completely disable the loading of insecure (HTTP) external photos if you so choose. When this option is set to "no", insecure photos will be replaced by a clickable link, and you will thus always seen the green lock icon when browsing. The option currently defaults to "yes".
Attachment 341758
Most big photo hosting sites do support HTTPS, so users of those won't need to take any action (i.e. flickr, smugmug, imgur, google+, facebook). However, other hosts such as photobucket do not. We recommend that you transition to secure image hosts over the course of the coming year. Alternatively, you can make use of forum attachments, albums, and galleries, as these are all secure.
Starting in 2018, the security option above will default to "no", so insecure photos will no longer show up in threads, posts, and signatures. These photos will instead be replaced by a clickable link. This will ensure a fully secure browsing experience for members and guests.
How can you tell which links are secure?
Secure links to web pages and photos start with https:// whereas standard (insecure) links start with http://. You may be able to add the 's' to certain standard links to make them secure, but not all servers support this.
Broken Pages and Security Errors
If you still run in to errors after a hard refresh, or don't see the lock icon on a page without user images or ads, please post the URL in this thread for us to investigate.
PF is committed to adhering to security best practices to defend our systems against hackers and ensuring our users' privacy. The community's tremendous support has helped make this possible!
|
