Parts of this site is not secure (such as images)

Ask the community for help and support.
superche
Posts: 17
Joined: Fri Jun 25, 2021 6:57 am

Parts of this site is not secure (such as images)

Post by superche »

Sorry, I have searched and looked at the FAQ area and setup area and cannot find an answer to this
Parts of this site is not secure (such as images)
Also it appears admin is not going to https at all.

Is there instructions anywhere on what needs to be done after the SSL cert in installed?
heatherbell
VIP Member
VIP Member
Posts: 1996
Joined: Mon Oct 07, 2019 4:39 am
Has thanked: 26 times
Been thanked: 175 times

Re: Parts of this site is not secure (such as images)

Post by heatherbell »

superche wrote: Mon Mar 27, 2023 6:07 am Parts of this site is not secure (such as images)
Also it appears admin is not going to https at all.
Check and edit your files to ensure https is in the defined constants:
/youradmin/includes/configure.php
/includes/configure.php
superche
Posts: 17
Joined: Fri Jun 25, 2021 6:57 am

Re: Parts of this site is not secure (such as images)

Post by superche »

That sorta of fixed it @heatherbell but when you just type the domain how do you force it to go to https thats a .httacess rewrite right?
heatherbell
VIP Member
VIP Member
Posts: 1996
Joined: Mon Oct 07, 2019 4:39 am
Has thanked: 26 times
Been thanked: 175 times

Re: Parts of this site is not secure (such as images)

Post by heatherbell »

superche wrote: Mon Mar 27, 2023 6:22 am That sorta of fixed it @heatherbell but when you just type the domain how do you force it to go to https thats a .httacess rewrite right?
Host servers differ but that's configured on our host server, there should be no requirement to change your htaccess
madruga
Posts: 24
Joined: Thu Mar 16, 2023 12:43 pm
Has thanked: 15 times
Been thanked: 1 time

Re: Parts of this site is not secure (such as images)

Post by madruga »

I am interested in this issue with images as well. How do we keep our images secure and not accessed directly using a link? I have SSL on my sites but can enter an image URL and view it in my browser. Or is this the normal behaviour?
burt
Lead Developer
Lead Developer
Posts: 2423
Joined: Tue Oct 29, 2019 9:37 am
Has thanked: 49 times
Been thanked: 137 times

Re: Parts of this site is not secure (such as images)

Post by burt »

madruga wrote: Wed Mar 29, 2023 1:07 am I have SSL on my sites but can enter an image URL and view it in my browser. Or is this the normal behaviour?
This is normal behaviour.
Gamechanger Addon: Queued Emails, try before you buy.
madruga
Posts: 24
Joined: Thu Mar 16, 2023 12:43 pm
Has thanked: 15 times
Been thanked: 1 time

Re: Parts of this site is not secure (such as images)

Post by madruga »

Thank you @burt

Isn't it better to secure these images? Perhaps, this is something needed to improve Phoenix? How can one protect images without breaking store?
artfulweb
VIP Member
VIP Member
Posts: 119
Joined: Thu Oct 29, 2020 12:34 pm
Has thanked: 11 times
Been thanked: 4 times

Re: Parts of this site is not secure (such as images)

Post by artfulweb »

madruga wrote: Thu Mar 30, 2023 1:42 pm Thank you @burt

Isn't it better to secure these images? Perhaps, this is something needed to improve Phoenix? How can one protect images without breaking store?
To secure your images makes sure they are not writeable. Do not have 777 permissions on them. Mine are at 604 which is the standard for my hoster to keep them from being writeable.
madruga
Posts: 24
Joined: Thu Mar 16, 2023 12:43 pm
Has thanked: 15 times
Been thanked: 1 time

Re: Parts of this site is not secure (such as images)

Post by madruga »

I'm not talking about making images writeable. Isn't it possible to make it impossible for images to be viewed directly via a URL? Surely, there must be a way to protect images from being viewed and stolen.
burt
Lead Developer
Lead Developer
Posts: 2423
Joined: Tue Oct 29, 2019 9:37 am
Has thanked: 49 times
Been thanked: 137 times

Re: Parts of this site is not secure (such as images)

Post by burt »

madruga wrote: Thu Mar 30, 2023 1:42 pm Isn't it better to secure these images? Perhaps, this is something needed to improve Phoenix? How can one protect images without breaking store?
Can you say why would you want to protect images? It seems pointless, but you may of course have a good reason for it. Even google does not protect images;

https://www.google.com/
Image Logo direct: https://www.google.com/images/branding/ ... 2x92dp.png

Having images that can't be accessed in this way, seems like a waste of time and effort.
It is not something that would make phoenix improved in my opinion.
Gamechanger Addon: Queued Emails, try before you buy.
Post Reply