hello,
for security reason I want my wiki users to logon via https connection while all the wiki is accessible via regular http connection.
so I added this code to LocalSettings.php:
$ServerName=$_SERVER['HTTP_HOST']; if ((substr($_GET['title'],-10,10) == ":Userlogin") && ($_SERVER['HTTPS'] != "on")) header("Location: https://$ServerName%22.$_SERVER%5B%27REQUEST_URI']); else if ((substr($_GET['title'],-10,10) != ":Userlogin") && ($_SERVER['HTTPS'] == "on")) header("Location: http://$ServerName%22.$_SERVER%5B%27REQUEST_URI']);
(also at http://meta.wikimedia.org/wiki/Help:Configuration_tips_and_tricks#HTTPS_on_L...)
now I've two problems,
first: Firefox tells me that the page is partially encypted - and I can't find which object isn't encrypted (see wiki.jct.ac.il login page)
second: the "remember me" check box do not work. (maybe it cause of LDAP auth ??)
any help will be appreciated.
--Yedidia
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
Yedidia Klein wrote:
for security reason I want my wiki users to logon via https connection while all the wiki is accessible via regular http connection. [snip]
Please redirect your message to the mediawiki-l mailing list. http://lists.wikimedia.org/mailman/listinfo/mediawiki-l
Wikitech-l is for discussion of Wikimedia related MediaWiki issues.
Yedidia Klein wrote:
first: Firefox tells me that the page is partially encypted - and I can't find which object isn't encrypted (see wiki.jct.ac.il login page)
You should be able to determine that with "View page info"; look under the "Media", "Scripts" and "Style sheets" tabs. As far as I can tell, _all_ the images, scripts and style sheets on that page are being sent unencrypted.
Ilmari Karonen wrote:
Yedidia Klein wrote:
first: Firefox tells me that the page is partially encypted - and I can't find which object isn't encrypted (see wiki.jct.ac.il login page)
You should be able to determine that with "View page info"; look under the "Media", "Scripts" and "Style sheets" tabs. As far as I can tell, _all_ the images, scripts and style sheets on that page are being sent unencrypted.
as i wrote only the login page is over https here:
https://wiki.jct.ac.il/index.php?title=%D7%9E%D7%99%D7%95%D7%97%D7%93:Userlo... I know that it's the wrong mailing list - but i'm just answering...
--Y
wikitech-l@lists.wikimedia.org