stunthanger.com

General control line discussion => Open Forum => Topic started by: RC Storick on June 27, 2017, 09:21:45 PM

Title: More web BS test
Post by: RC Storick on June 27, 2017, 09:21:45 PM
If you have received a notice this site is not secure it's because I was asleep at the switch and let the SSL certificate expire. I just renewed it and it will be an hour or so to update.
Title: Re: More web BS
Post by: Dan McEntee on June 27, 2017, 09:48:55 PM
  I haven't had any problems with the site, but have noticed that the home page "stack" of the various sections is different on my computers now, with the Open Forum right on top now. Had me puzzled for a while, thinking I wasn't logged in properly or something. They are all there, just in a different order now.
   type at you later,
  Dan McEntee
Title: Re: More web BS
Post by: Larry Fernandez on June 27, 2017, 11:11:03 PM
Thanks for the heads up

Larry, Buttafucco Stunt Team
Title: Re: More web BS
Post by: RC Storick on June 28, 2017, 07:46:02 AM
  I haven't had any problems with the site, but have noticed that the home page "stack" of the various sections is different on my computers now, with the Open Forum right on top now. Had me puzzled for a while, thinking I wasn't logged in properly or something. They are all there, just in a different order now.
   type at you later,
  Dan McEntee

I changed the forum stack order to make it easier to access. SSL is now installed and site is secure
Title: Re: More web BS
Post by: JoeJust on June 28, 2017, 09:32:20 AM
I now have to manually log in.
Joe
Title: Re: More web BS
Post by: john e. holliday on June 28, 2017, 12:21:54 PM
Thanks for letting us know.  I thought my computer went hay wire.   LL~ LL~
Title: Re: More web BS
Post by: Brett Buck on June 28, 2017, 09:37:58 PM
I changed the forum stack order to make it easier to access. SSL is now installed and site is secure

   Actually, I think you still have a problem somewhere, because using the "modify" form still triggers a warning about a "non-secure site".

    Brett
Title: Re: More web BS
Post by: RC Storick on June 28, 2017, 09:39:18 PM
   Actually, I think you still have a problem somewhere, because using the "modify" form still triggers a warning about a "non-secure site".

    Brett

I know where the issue is and I am working on it
Title: Re: More web BS
Post by: Brett Buck on June 28, 2017, 09:40:37 PM
I know where the issue is and I am working on it

  Very good, thanks!  There is a workaround, use the "edit" function at the lower right, rather than the "modify" form in the upper right.

    Brett
Title: Re: More web BS
Post by: RC Storick on June 28, 2017, 10:03:12 PM
Domain Name: stunthanger.com
URL Tested: https://stunthanger.com/smf
Number of items downloaded on page: 59

   Valid Certificate found.
   Certificate valid through: Jun 28 23:59:59 2018 GMT
Certificate Issuer: COMODO CA Limited
SSL Protocols Supported: SSLv3 TLSv1 TLSv1.1 TLSv1.2
   Server supports SSLv3, may be vulnerable to POODLE attack. It is suggested to disable the SSLv3 protocol.
Server certificate
   Total number of items: 59
Number of insecure items: 2
Insecure URL: http://www.stunthanger.com/images/stunthangarbanner.jpg.jpg
Found in: https://stunthanger.com/smf/

Insecure URL: http://stunthanger.com/smf/open-forum/we-are-back-up/?action=dlattach;attach=252560;image
Found in: https://stunthanger.com/smf/

   Secure calls made to other websites:
pagead2.googlesyndication.com is valid and secure.

   Insecure <form> call.
Found on line # 2181 in file: stunthanger.com/smf/index.html
(Note: Chrome will show a security error for any secure page with an insecure <form> call on the page)
Title: Re: More web BS
Post by: RC Storick on June 28, 2017, 10:06:45 PM
I am still working on things maybe tomorrow I will get it sorted out
Title: Re: More web BS
Post by: BillLee on June 29, 2017, 07:55:28 AM
I am still working on things maybe tomorrow I will get it sorted out
Robert, from my own experience:

Look for those places in the code that use "http" specifically instead of either "https" or the default to whatever the user started out with. I suspect your 'Modify then Save' code has an explicit 'http' in there.

Yes, probably preaching to the choir!

For all: if you have a bookmark for stunthanger that uses 'http', change the bookmark to use 'https' and the message from the browser will go away. (Except for the few spots Sparky is looking for! :-) )
Title: Re: More web BS test
Post by: RC Storick on June 29, 2017, 04:16:54 PM
testing