Recent
Categories
Tags
Users
View Replies (4)

Resolved SSL site and getting a security error in Chrome

  1. Ray
    Ray
  3. Bugs
  4. Tuesday, 16 December 2014
  5.  Subscribe via email
Hi,
We have a site with CMC Mailchimp 1.3.1 on Joomla 3.2.4 and the site is using SSL and https urls. We are getting an error on the site in Chrome because of the newsletter sign-up form;
(Note: Chrome will show a security error for any secure page with an insecure <form> call on the page)

The form is using a link with out the https, just http, <form action="http:// . I have looked for the setting for this in the component and module, the Webhooks is using a https url. How can I change the form action to a url with https or just //?
Ray
PS Sorry for post in General forum, didn't notice the Category field on the post.
Responses (4)
Daniel Dimitrov
Daniel Dimitrov
Support team
Sherlock Holmes The Voice
Accepted Answer Pending Moderation
Hey Ray!
I had a look at our current code base and the action url is:


<?php echo JRoute::_('index.php?option=com_cmc&format=raw&task=subscription.save'); ?>


Joomla then decides how it should look in the html of the page and if it should have the http or https in front of that.
I don't remember what we had in version 1.3, but this is what we have in verslon 1.5, so maybe update to it? Your other option would be to create a template override and to hardcode the url in the module.

Regards,
Daniel
Please if you use our extensions be so kind and review them at JED
Matukio | Hotspots Pro | CComment Pro
  1. more than a month ago
  2. Bugs
  3. # 1
Ray
Ray
Accepted Answer Pending Moderation
Hi Daniel ,
That looks like the same code I found in 1.3.1 in the default.php file
<form action="<?php echo JRoute::_('index.php?option=com_cmc&format=raw&task=subscription.save');?>"
but SSL is enabled in Joomla's Global Configuration settings, why would Joomla use a http url? The url before the index.php?option is not a site url it is like this;
<form id="mc-embedded-subscribe-form" class="validate" novalidate="" target="_blank" name="mc-embedded-subscribe-form" method="post" action="http://ourdomain.us4.list-manage.com/subscribe/post?u=***********************************">
So it is a "manage.com" domain url. I don't know where CMC is getting that domain but the one it has in its Webhooks field is a https url.
Thanks for looking at this,
Ray
  1. more than a month ago
  2. Bugs
  3. # 2
Daniel Dimitrov
Daniel Dimitrov
Support team
Sherlock Holmes The Voice
Accepted Answer Pending Moderation
the code that you've pasted doesn't come from cmc. you've added another module to your site for subscriptions.
Please if you use our extensions be so kind and review them at JED
Matukio | Hotspots Pro | CComment Pro
  1. more than a month ago
  2. Bugs
  3. # 3
Ray
Ray
Accepted Answer Pending Moderation
Hi Daniel,
I am very sorry to have taken up your time, the site has CMC 1.3.1 installed but the newsletter sigin-up is in a custom module I have now found.
Thank you
Ray
  1. more than a month ago
  2. Bugs
  3. # 4
  • Page :
  • 1


There are no replies made for this post yet.
However, you are not allowed to reply to this post.
Powered by EasyDiscuss for Joomla!