Community @ The Turning Gate

Support community for TTG plugins and products.

NOTICE

The Turning Gate's Community has moved to a new home, at https://discourse.theturninggate.net.

This forum is now closed, and exists here as a read-only archive.

  • New user registrations are disabled.
  • Users cannot create new topics.
  • Users cannot reply to existing topics.

You are not logged in.

#1 2017-10-20 22:52:50

btaylorphoto
Member
Registered: 2015-03-04
Posts: 36

SSL says password not working for galleries

Tied to login to a session and after entering the correct password and login it just wants me to log in again its like it is looping and not finding the album. Any suggestions ?

Thanks,
Brian

Offline

#2 2017-10-20 23:18:16

rod barbee
Moderator
From: Port Ludlow, WA USA
Registered: 2012-09-24
Posts: 17,830
Website

Re: SSL says password not working for galleries

I don't know the solution, but may see the problem.
I looked at one of your client pages that requires login. Looking at the page source code you'll find this line:

<form id="password-protection" class="password-protection" name="form" method="post" action="/client/client-ordering/album/index.php"> 

when hovering the mouse over /client/client-ordering/album/index.php, the url source is shown to be:
view-source:http://www.btaylorphoto.com/client/client-ordering/album/index.php
Note that it's http, not https

So you may need to address this in .htaccess as well. I just don't know how.
Or there might be a way to hack the gallery plug-in and change the relative url to an absolute url.
Or maybe edit the exported gallery template. Probably the index.php file?

Anyway, hopefully someone with better SSL or .htaccess knowledge will chime in.


Rod 
Just a user with way too much time on his hands.
www.rodbarbee.com
ttg-tips.com, Backlight 2/3 test site

Offline

#3 2017-10-21 00:15:44

charlie.choc
Member
From: Marietta, GA
Registered: 2014-01-09
Posts: 359
Website

Re: SSL says password not working for galleries

You could try this in your .htacess (I found it by googling and have not tried it):

    Header set Content-Security-Policy "default-src 'self';"

It looks like it might let secure pages load http resources from your website only.

https://content-security-policy.com/

https://www.w3.org/TR/upgrade-insecure-requests/

Last edited by charlie.choc (2017-10-21 00:40:06)

Offline

Board footer

Powered by FluxBB