Verify E-Mail HTTPS link

Discussion in 'Troubleshooting' started by klorox, Nov 30, 2010.

  1. klorox

    klorox New Member

    Joined:
    Nov 20, 2010
    Messages:
    7
    How can i make the {$url} variable in the Verify E-Mail Template Secure.

    As it stands now, upon clicking the link the user is either automatically logged into their member page (if set up), or forwarded to the login page both http not https thus making the login insecure. How can this be corrected. Thank You.
  2. alexander

    alexander Administrator Staff Member

    Joined:
    Jan 8, 2003
    Messages:
    6,279
    Set both aMember CP -> Secure Root Url and Root URL to https.
  3. klorox

    klorox New Member

    Joined:
    Nov 20, 2010
    Messages:
    7
    Didn't work

    The link in the email changed to https but once you click it, you are redirected to http:www.site.com/amember/member.php <====NOT SECURE.

    UPDATE: Actually it worked perfectly. I forgot that i placed a redirect in the thanks page, to avoid seeing it. Since i hate when people just post "it's fixed" in forums, here's exactly what i did incase someone stumbles upon this 6mo from now.

    In every email template i replaced each instance of {$config.root_url} with {$config.root_surl} to use the ssl encrypted link. Then i changed both secure root and root url in admin to https (thx above poster!). And finally put this at the top of my thanks.html page:

    <script type="text/javascript">
    <!--
    window.location = "https://www.site.com/amember/member.php"
    //-->
    </script>

    to automatically redirect to Secure login screen upon clicking the verification email link.

    FYI: changing root url to https has no effect on the logout script (they will be redirected to http://site.com. Which is awesome.
  4. alexander

    alexander Administrator Staff Member

    Joined:
    Jan 8, 2003
    Messages:
    6,279
    Logout url is hardcoded in amember CP -> Setup -> php_include -> Logout URL

Share This Page