View Issue Details

IDProjectCategoryView StatusLast Update
0005927phplist applicationInterface - Backendpublic18-02-08 14:16
Reporterpapaya 
PrioritynormalSeverityfeatureReproducibilityalways
Status resolvedResolutionfixed 
Product Version2.10.2 
Target Version2.10.7Fixed in Version2.10.3 
Summary0005927: https not natively supported
DescriptionWhen the system runs on a secure server (https://..), the admin backend does not work completely any more, due to hard-coded protocol informations in the source...

Whenever you try to save things in the admin menue (configuration), you get forwarded to the hostname without https (just http).

As a quick hack, I grepped for the http and replaced it with https, where neccesary, but this is not elegant either :-)

I feel there is no need for hard-coding the protocol into the source, as php should have access to all the needed server-variables. Therefore, the target address could be constructed by the script, making it work on any server, http or https...
TagsNo tags attached.

Relationships

related to 0003721 closed phplist 2.10.x 
related to 0015521 resolvedmichiel https breaks when trying to send a message 

Activities

michiel

27-04-06 22:09

manager   ~0013156

if you can give me the files and line numbers that need to change, I'd happily do that, but otherwise it's a bit of a can of worms.

Maybe it's even quicker to set up an apache redirect that redirects the http to https, that's only one line.

I agree that it would be nice to support this, but there are loads of other things to sort out.....

papaya

28-04-06 08:08

reporter   ~0013170

I just grepped for "https" and found these files; actually, I don't know whether the "https" was in some of them before already...

lists/admin/connect.php
lists/admin/defaultconfig.inc
lists/admin/sendemaillib.php
lists/admin/commonlib/pages/importcsv.php
lists/admin/commonlib/lib/interfacelib.php

(I already removed all occurances of "https" where I sure did not change anything in the file, e.g. the paypal-Link...)

papaya

28-04-06 08:09

reporter   ~0013171

Here are the files I changed, but as I said: I just did a quick hack and replaced http with https...

28-04-06 08:09

 

files.tar.gz (49,683 bytes)

michiel

09-08-06 16:41

manager   ~0016509

made most locations use a global variable, but it's initialised in "init.php" and not in config.php for now