Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Using WebYep with SSL only site - Rich Text editor doesn't show #11

Open
DanZ9 opened this issue Feb 22, 2018 · 1 comment
Open

Using WebYep with SSL only site - Rich Text editor doesn't show #11

DanZ9 opened this issue Feb 22, 2018 · 1 comment

Comments

@DanZ9
Copy link

DanZ9 commented Feb 22, 2018

Hello,

we used WebYep with our old site which was http only. This worked fine.

Now after upgrading our site to just use SSL (https), we found that WebYep continued to work, but when the pop up editor window would show, we would get just a small textbox and all the rich controls weren't shown.
This was due to a security feature in modern browsers. It appeared that the absolute link for the rich text javascript file was using http as a protocol, while the rest of the page was loading via https. The browser found that this was a security threat and only loaded the editor when you manually confirmed that.

Looking through the code we found the file WYURL.php in webyep-system/programm/lib to contain in line 56 the following code:

else $this->sProtocol = "http";

We understood this to be a default fallback to set the protocol to http when the protocol could not be determined.

We change line 56 into:

else $this->sProtocol = "https";

and found now, that the rich text editor was displayed by the browser without any problem, since it was now called in the HTML page with https. So the whole page was loaded with https.

So far we have not encountered any problems with this small "hack".

Hope this helps.
Have a beautiful day

@FZehner
Copy link

FZehner commented Nov 3, 2018

Hey guys,

thanks a lot for posting that "hack". It worked fine for me. :)

Have a nice one.

regards

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants