Forums after move

Discussion in 'Feedback' started by Neoony, Jun 29, 2016.

  1. Neoony

    Neoony Member

    Messages:
    1,370
    Likes Received:
    106
    Trophy Points:
    0
    https should be enforced and if you access http you should be redirected. (especially because chat doesnt work in http and because there are probably tons of links without https and then people coming through them might have issues, same as there are many issues in browser as you cant just type the domain name but have to add https to have everything correctly)

    I have noticed few random logouts, which I think are related to http/s as we had this issue back when the new forums was done (it was just worse than now) and Iam pretty sure that you couldnt access only http on forums after that issue was fixed.
    Accessing http seems to log out sometimes. Its not happening too often, but it does sometimes (maybe you dont even have to access http and it logs you out because of something else)

    If anyone notices anything about the logout issue, reply. Mostly notice how it behaves when you go inactive and come back.

    You might have this issue more, if you got http links for empires in your browser history.

    If you go on "forums.empiresmod.com" it will put you to the http one. (and most probably logs you out)

    empiresmod.com still links to "forums.empiresmod.com" which will link you to the http forums.

    btw after the move, typing "forums.empiresmod.com" would give me error from dreamhost that the page was not found. Had to go cmd.exe and type in "ipconfig /flushdns" otherwise I would have to also use the http/s to access it at all...so I can imagine many people might have still not figured that out (noticed less activity on forums?)


    btw, considering that hosting doesnt seem to go through cloudflare anymore, but simply on dreamhost, maybe there is no worries with the security error and getting into other accounts. But I will scan it few times just to be sure.
     
    Last edited: Jun 29, 2016
  2. flasche

    flasche Member Staff Member Moderator

    Messages:
    13,299
    Likes Received:
    168
    Trophy Points:
    0
    isnt apache supposed to do this redirect?
     
    Last edited: Jun 29, 2016
  3. Neoony

    Neoony Member

    Messages:
    1,370
    Likes Received:
    106
    Trophy Points:
    0
    I dont think that the issue of not being able to access the site with "forums.empiresmod.com" had anything to do with http/s.
    Iam not sure whats going on there.
    Iam guessing and hoping that this should get automatically updated after few days, even if you dont flush your dns caches manually.

    EDIT:
    ...if thats what u meant xD

    if you meant to redirect from http to https then I believe that should be done within xenforo settings. not absolutely sure there though

    Another thing.
    empiresmod.com seems to not support https at all so if you click on "home" in the forums, it will put you to "https://empiresmod.com/" and its not gonna load, because its https.
    [​IMG]

    and here is how it looked before I flushed the dns, just btw:
    [​IMG]
     
    Last edited: Jun 29, 2016
  4. flasche

    flasche Member Staff Member Moderator

    Messages:
    13,299
    Likes Received:
    168
    Trophy Points:
    0
    the TTL of the entry in your dns cache is set to a few hours, so you just might have had the wrong entry at the time, it shouldnt be a peristing problem.

    you can do
    Code:
    ipconfig /displaydns
    to see all your dns entries. but you better reroute the output to a text file since its gonna be more than lines cached in cmd.
    also easier to search with ctrl+f ;)
     
  5. Neoony

    Neoony Member

    Messages:
    1,370
    Likes Received:
    106
    Trophy Points:
    0
    Yep its 24 hours.

    ... or did you mean the redirect from http to https?
    It probably needs to be done in the .htaccess file
    I guess it wasnt transferred?
     
    Last edited: Jun 29, 2016
  6. Jephir

    Jephir ALL GLORY TO THE JEPHIR

    Messages:
    1,409
    Likes Received:
    6
    Trophy Points:
    0
    The Strict-Transport-Security header is missing. Without it, the forum will not redirect to HTTPS on the browser, which causes the secure session cookies to not be sent, which resets the session. See my post last time the forum had this issue: New Forums
     
  7. Thexa4

    Thexa4 Developer Staff Member Moderator

    Messages:
    304
    Likes Received:
    98
    Trophy Points:
    0
    Thanks for the help, I've emulated the HSTS header for now to test it, if it works I'll enable it.
     
  8. Neoony

    Neoony Member

    Messages:
    1,370
    Likes Received:
    106
    Trophy Points:
    0
    Works nice, thanks :P

    "Home" at forums still links to a nonworking httpS://empiresmod.com
    Although thats not a huge issue.

    (forums probably autoconverts all of those links when its on https)
     
  9. CyberKiller

    CyberKiller Nyooks!

    Messages:
    1,107
    Likes Received:
    8
    Trophy Points:
    0
    You might want to get rid of the "Server Provided by GameSwitchers" link on the bottom left of the forum.
     
  10. complete_

    complete_ lamer

    Messages:
    6,438
    Likes Received:
    144
    Trophy Points:
    0
    forum emails are sent from james' email. no idea if it intended, just thought i'd give a heads up

    also is there a way for us to see the subforums on the main forum page? i didnt even know Clans was under General
     

Share This Page