Secure Login

Infor on the running of this forum, rules, regs etc

Moderator: Contaminated

User avatar
Richard
Posts: 587
Joined: Fri Feb 19, 2010 7:29 pm
Location: HORSHAM
Contact:

Secure Login

Postby Richard » Mon Apr 02, 2018 9:54 am

As my browser now checks for insecure login I see this is not secure. I know other browsers now check too. I also know other forums have upgraded to secure logins. Can we or am I just using a non-secure login?

https://support.mozilla.org/en-US/kb/in ... =inproduct
Richard.
Dax Rush 5.0l TVR V8, EFI with Megasquirt ECU and wasted spark, Racelogic Traction Control, Quaife LSD. Now with big brother 1973 TR6 being totally body-off restored.

User avatar
Larkingabout
Posts: 1512
Joined: Fri Feb 11, 2011 8:11 am
Location: Tonbridge
Contact:

Re: Secure Login

Postby Larkingabout » Mon Apr 02, 2018 11:08 am

Richard,

Just checked mine and also shows as not secure
James
The man in the Red Coat

User avatar
David T
Posts: 3959
Joined: Sun Mar 18, 2012 9:48 am
Contact:

Re: Secure Login

Postby David T » Mon Apr 02, 2018 1:33 pm

Right that's it, I'm removing my credit card details right now.

Do you mean just not https?

User avatar
Richard
Posts: 587
Joined: Fri Feb 19, 2010 7:29 pm
Location: HORSHAM
Contact:

Re: Secure Login

Postby Richard » Wed Apr 04, 2018 3:42 pm

I means that IMHO it is simply not secure to login. Whilst I use a non-important password on this and all similar sites, it still means more hackable information. Would appreciate an upgrade to make SKCC a secure login. (Thanks in advance.)
Richard.
Dax Rush 5.0l TVR V8, EFI with Megasquirt ECU and wasted spark, Racelogic Traction Control, Quaife LSD. Now with big brother 1973 TR6 being totally body-off restored.

jeffw
Posts: 7147
Joined: Fri Mar 12, 2010 1:51 pm
Location: Tonbridge
Contact:

Re: Secure Login

Postby jeffw » Thu Apr 05, 2018 5:32 am

Basically Chrome has been updated to not allow the passing on login credentials in the clear, ie via HTTP. This site does exactly that so Chrome stops you logging on. Edge still allows it however.

The site needs to be updated to run SSL otherwise Chrome will not work.

greenwoo
Site Admin
Posts: 10008
Joined: Thu Dec 03, 2009 10:34 am
Contact:

Re: Secure Login

Postby greenwoo » Thu Apr 05, 2018 8:57 am

Right. Tried to attempt this last night without success.
IF any of you can access the site BUT CAN'T LOG IN....then you may need to clear your cache due to a setting change.

Moving forward have asked a 'Pro' to look into this SSL issue so that all will be happy and secure.

User avatar
SteveRST
Posts: 1250
Joined: Sat Aug 18, 2012 12:23 pm
Location: Chessington
Contact:

Re: Secure Login

Postby SteveRST » Thu Apr 05, 2018 10:45 am

I was unable to login this morning (using Firefox) - it simply wouldn't allow it.

I noticed that the site is served by default using non-secure http://

But if you change the URL and specifically request https:// then it works fine and serves the page securely:

SKCC secure.jpg
SKCC secure.jpg (62 KiB) Viewed 3686 times


So Mark, it appears that the SSL certificate is installed correctly and working.


What you need to do is set some rules so that if anyone visits using http:// they are automatically redirected to https://
You need to use an FTP program or cPanel file manager and find a file .htacess in your web root directory (usually called public_html). Add a few lines of code to that and hopefully it'll work. See here for instructions: https://www.hostinger.com/tutorials/ssl/forcing-https

Also - a few other changes to make which would just make sense...
- On the homepage of SKCC wesbite, then menu link for the forum directs people to http:// so you should change this to https://
- Many of the images are hard-linked to their non-secure http:// address. E.g. images on the homepage. This stop the page being displayed securely, even though I am visiting it through https:// - E.g.

SKCC secure 2.jpg
SKCC secure 2.jpg (79.81 KiB) Viewed 3686 times


Steve
Westfield Zetec turbo & Westfield Megabusa turbo

jeffw
Posts: 7147
Joined: Fri Mar 12, 2010 1:51 pm
Location: Tonbridge
Contact:

Re: Secure Login

Postby jeffw » Thu Apr 05, 2018 12:10 pm

Spot on, no redirect from HTTP to HTTPS for login.

User avatar
DJ.
Posts: 5562
Joined: Mon May 30, 2011 7:31 pm
Contact:

Re: Secure Login

Postby DJ. » Thu Apr 05, 2018 5:05 pm

I had quite a bit of trouble logging on until I typed < https://www.southernkitcars.com/forum > into the address bar to force the browser to use the secure page, and then the login button worked fine.

greenwoo
Site Admin
Posts: 10008
Joined: Thu Dec 03, 2009 10:34 am
Contact:

Re: Secure Login

Postby greenwoo » Thu Apr 05, 2018 6:28 pm

we have someone working on this tomorrow, so hopefully back to normal for all by the weekend.....
as Duncan/Steve etc have said, if you have a problogging in either clear your cache/swotch browser or type https


Return to “Forum Admin”

Who is online

Users browsing this forum: No registered users and 2 guests