phplist

NOTE:: Before reporting an issue, make sure you are running the latest version, currently 3.3.1


View Issue Details Jump to Notes ] Print ]
IDProjectCategoryView StatusDate SubmittedLast Update
0005927phplist applicationInterface - Backendpublic30-03-06 18:2818-02-08 14:16
Reporterpapaya 
PrioritynormalSeverityfeatureReproducibilityalways
StatusresolvedResolutionfixed 
PlatformOSOS Version
Product Version2.10.2 
Target Version2.10.7Fixed in Version2.10.3 
Summary0005927: https not natively supported
DescriptionWhen the system runs on a secure server (https://.. [^]), the admin backend does not work completely any more, due to hard-coded protocol informations in the source...

Whenever you try to save things in the admin menue (configuration), you get forwarded to the hostname without https (just http).

As a quick hack, I grepped for the http and replaced it with https, where neccesary, but this is not elegant either :-)

I feel there is no need for hard-coding the protocol into the source, as php should have access to all the needed server-variables. Therefore, the target address could be constructed by the script, making it work on any server, http or https...
TagsNo tags attached.
Attached Filesgz file icon files.tar.gz [^] (49,683 bytes) 28-04-06 09:09

- Relationships Relation Graph ] Dependency Graph ]
related to 0003721closed phplist 2.10.x 
related to 0015521resolvedmichiel https breaks when trying to send a message 

-  Notes
(0013156)
michiel (manager)
27-04-06 23:09

if you can give me the files and line numbers that need to change, I'd happily do that, but otherwise it's a bit of a can of worms.

Maybe it's even quicker to set up an apache redirect that redirects the http to https, that's only one line.

I agree that it would be nice to support this, but there are loads of other things to sort out.....
(0013170)
papaya (reporter)
28-04-06 09:08

I just grepped for "https" and found these files; actually, I don't know whether the "https" was in some of them before already...

lists/admin/connect.php
lists/admin/defaultconfig.inc
lists/admin/sendemaillib.php
lists/admin/commonlib/pages/importcsv.php
lists/admin/commonlib/lib/interfacelib.php

(I already removed all occurances of "https" where I sure did not change anything in the file, e.g. the paypal-Link...)
(0013171)
papaya (reporter)
28-04-06 09:09

Here are the files I changed, but as I said: I just did a quick hack and replaced http with https...
(0016509)
michiel (manager)
09-08-06 17:41

made most locations use a global variable, but it's initialised in "init.php" and not in config.php for now


Copyright © 2000 - 2017 MantisBT Team
Powered by Mantis Bugtracker