Page 1 of 2

Secure Login

Posted: Mon Apr 02, 2018 9:54 am
by Richard
As my browser now checks for insecure login I see this is not secure. I know other browsers now check too. I also know other forums have upgraded to secure logins. Can we or am I just using a non-secure login?

https://support.mozilla.org/en-US/kb/in ... =inproduct

Re: Secure Login

Posted: Mon Apr 02, 2018 11:08 am
by Larkingabout
Richard,

Just checked mine and also shows as not secure

Re: Secure Login

Posted: Mon Apr 02, 2018 1:33 pm
by David T
Right that's it, I'm removing my credit card details right now.

Do you mean just not https?

Re: Secure Login

Posted: Wed Apr 04, 2018 3:42 pm
by Richard
I means that IMHO it is simply not secure to login. Whilst I use a non-important password on this and all similar sites, it still means more hackable information. Would appreciate an upgrade to make SKCC a secure login. (Thanks in advance.)

Re: Secure Login

Posted: Thu Apr 05, 2018 5:32 am
by jeffw
Basically Chrome has been updated to not allow the passing on login credentials in the clear, ie via HTTP. This site does exactly that so Chrome stops you logging on. Edge still allows it however.

The site needs to be updated to run SSL otherwise Chrome will not work.

Re: Secure Login

Posted: Thu Apr 05, 2018 8:57 am
by greenwoo
Right. Tried to attempt this last night without success.
IF any of you can access the site BUT CAN'T LOG IN....then you may need to clear your cache due to a setting change.

Moving forward have asked a 'Pro' to look into this SSL issue so that all will be happy and secure.

Re: Secure Login

Posted: Thu Apr 05, 2018 10:45 am
by SteveRST
I was unable to login this morning (using Firefox) - it simply wouldn't allow it.

I noticed that the site is served by default using non-secure http://

But if you change the URL and specifically request https:// then it works fine and serves the page securely:

SKCC secure.jpg
SKCC secure.jpg (62 KiB) Viewed 92597 times


So Mark, it appears that the SSL certificate is installed correctly and working.


What you need to do is set some rules so that if anyone visits using http:// they are automatically redirected to https://
You need to use an FTP program or cPanel file manager and find a file .htacess in your web root directory (usually called public_html). Add a few lines of code to that and hopefully it'll work. See here for instructions: https://www.hostinger.com/tutorials/ssl/forcing-https

Also - a few other changes to make which would just make sense...
- On the homepage of SKCC wesbite, then menu link for the forum directs people to http:// so you should change this to https://
- Many of the images are hard-linked to their non-secure http:// address. E.g. images on the homepage. This stop the page being displayed securely, even though I am visiting it through https:// - E.g.

SKCC secure 2.jpg
SKCC secure 2.jpg (79.81 KiB) Viewed 92597 times


Steve

Re: Secure Login

Posted: Thu Apr 05, 2018 12:10 pm
by jeffw
Spot on, no redirect from HTTP to HTTPS for login.

Re: Secure Login

Posted: Thu Apr 05, 2018 5:05 pm
by DJ.
I had quite a bit of trouble logging on until I typed < https://www.southernkitcars.com/forum > into the address bar to force the browser to use the secure page, and then the login button worked fine.

Re: Secure Login

Posted: Thu Apr 05, 2018 6:28 pm
by greenwoo
we have someone working on this tomorrow, so hopefully back to normal for all by the weekend.....
as Duncan/Steve etc have said, if you have a problogging in either clear your cache/swotch browser or type https