Forum Support

Shape 5
March 29, 2024, 05:57:01 AM *
Welcome, Guest. Please login or register.

Login with username, password and session length
News: Shape 5 Forum
 
   Home   Help Search Login Register  
Pages: [1]
  Print  
Author Topic: https for My Account Pop Up  (Read 574 times)
shape5login
Jr. Member
**
Offline Offline

Posts: 6



« on: November 15, 2007, 03:14:40 AM »

Hi,

The "My Account" Pop Up on the toolbar is a nice little feature but can you tell me how can to make it secure so my users are always logging on using HTTPS?  At the moment it defaults to the protocol in use on the current page.

Thanks
John
Logged
mikek
Administrator
*****
Offline Offline

Posts: 28743



WWW
« Reply #1 on: November 15, 2007, 07:43:42 AM »

John,

https is controlled on your host end not through Joomla. You would need to contact them about buying an ssl cert, this is a pretty common sale with hosting providers. Hope that helps!
Logged

Mike Knott
------------
Shape 5 Team

- Need a great host for your website? We highly recommend siteground.com!


- Put your trust in the hands of our extremely qualified staff to get your job done right!


- Firebug is the most powerful web development and debugging tool, and it will save you a lot of time, frustration and forum questions:
Install Firebug
shape5login
Jr. Member
**
Offline Offline

Posts: 6



« Reply #2 on: November 16, 2007, 06:00:31 AM »

Mike,

Understand.  SSL is already installed for the domain and functioning fine.  What I'm trying to do is force https for transmission of the user name and password entered in the My Account form. 

At the moment if you call "My Account" from a page being displayed over https then the login is processed over SSL so no problem.  I haven't put an analyser on it but it appears if that if you call  "My Account" from a http page it sends the user name and password in the clear.   

I've had a bit of a dig around in the javascript but couldn't see where I could hard code this.

Thanks,
John
Logged
jonahh
Administrator
*****
Offline Offline

Posts: 23789



WWW
« Reply #3 on: November 16, 2007, 12:13:45 PM »

John,

The My account tab is just another module position that is wrapped with a hidden div.  I've never heard of making a specific DIV or Table on a website use an SSL.

I would think you'd have to edit the actual login module that comes with Joomla.  This module should have a <form> tab in it with a action field where you could prefix with https, no idea if this would work but maybe Smiley

Regards,
Logged

Jonah Hall
------------
Shape 5 Team

- Need a great host for your website? We highly recommend siteground.com!


- Put your trust in the hands of our extremely qualified staff to get your job done right!


- Firebug is the most powerful web development and debugging tool, and it will save you a lot of time, frustration and forum questions:
Install Firebug
shape5login
Jr. Member
**
Offline Offline

Posts: 6



« Reply #4 on: November 17, 2007, 03:16:41 AM »

Jonah,

Thanks for the tip.  I made a couple of minor changes to mod_login.php to replace the http string in the form action with https.   This seems to work OK and still returns the user back to the protocol they were running before they logged in.  In case anyone is interested:

// Login output
// ie HTML when not logged in and trying to login
   // used for spoof hardening
   $validate = josSpoofValue(1);
//Start Mod
   $login_url=sefRelToAbs( 'index.php' );   
   $is_secure = strpos($login_url, "https://");

   if ( $is_secure !== 0 ) {    //Then the form isn't using SSL   
         $login_url=substr_replace($login_url, "https", 0, 4);  //Replace http with https
   }
   ?>
   <form action="<?php echo $login_url; ?>" method="post" name="login" >
//End mod
   <?php
   echo $pretext;
   ?>
Cheers
John
Logged
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Looking for the largest variety in template designs? Look no more. Never buy 1 theme again. Signups start at just $89 for access to all of our themes.
Send Us An Email
Please send us your questions and we will email you back as soon as we can. Product support questions should be posted in our support forums under the Help menu. Our staff will assist you from there.