Skip to content

Using WebYep with SSL only site - Rich Text editor doesn't show #11

@ghost

Description

Hello,

we used WebYep with our old site which was http only. This worked fine.

Now after upgrading our site to just use SSL (https), we found that WebYep continued to work, but when the pop up editor window would show, we would get just a small textbox and all the rich controls weren't shown.
This was due to a security feature in modern browsers. It appeared that the absolute link for the rich text javascript file was using http as a protocol, while the rest of the page was loading via https. The browser found that this was a security threat and only loaded the editor when you manually confirmed that.

Looking through the code we found the file WYURL.php in webyep-system/programm/lib to contain in line 56 the following code:

else $this->sProtocol = "http";

We understood this to be a default fallback to set the protocol to http when the protocol could not be determined.

We change line 56 into:

else $this->sProtocol = "https";

and found now, that the rich text editor was displayed by the browser without any problem, since it was now called in the HTML page with https. So the whole page was loaded with https.

So far we have not encountered any problems with this small "hack".

Hope this helps.
Have a beautiful day

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions