Display in Firefox - security issue

Discussion in 'Installation' started by style7, Oct 27, 2010.

  1. style7

    style7 Member

    Joined:
    Oct 22, 2008
    Messages:
    42
    Can you please advise why the amember login or sign up page displays a security error in either Firefox or IE? In IE it says Explorer has blocked content displaying security errors. In Firefox, it displays really bad.

    Annette
  2. alexander

    alexander Administrator Staff Member

    Joined:
    Jan 8, 2003
    Messages:
    6,279
    Sorry not sure what errors you mean? Can you attach screenshot?
  3. style7

    style7 Member

    Joined:
    Oct 22, 2008
    Messages:
    42
  4. alexander

    alexander Administrator Staff Member

    Joined:
    Jan 8, 2003
    Messages:
    6,279
    It seems you have wrong setting for aMember CP -> Setup -> Global -> Secure Root URL
    Check it and fix if necessary.
    Also, make sure that you have aMember styles files in /amember/templates/css folder.
  5. skippybosco

    skippybosco CGI-Central Partner Staff Member

    Joined:
    Aug 22, 2006
    Messages:
    2,526
    @style7: Your certificate expired on May 7 2010

    [​IMG]
  6. style7

    style7 Member

    Joined:
    Oct 22, 2008
    Messages:
    42
    Thanks. I changed the https to http in the secure root and it fixed the problem. However does this make the signup process secure?

    Also - when you refer to "amember styles files" in css folder - do you mean amember.css?

    This folder contains admin.css, amember.css, jquery-ui.css, reset.css and site-dist.css

    Is this correct?
  7. style7

    style7 Member

    Joined:
    Oct 22, 2008
    Messages:
    42
    certificate

    Thanks for the screenshot re the certificate. I'm not sure how to get one of these
  8. skippybosco

    skippybosco CGI-Central Partner Staff Member

    Joined:
    Aug 22, 2006
    Messages:
    2,526
    No, if you are using http it is sent in plain text

    As the issue is related to the certificate, you do not need to worry about this.

    Contact your host / support to assist you in renewing and installing your certificate.
  9. miso

    miso aMember Pro Customer

    Joined:
    Aug 22, 2006
    Messages:
    543
    I am not sure what's with the paranoia of making signup process secure or not... how more secure can it possibly get, given the state of aMember's default, out of the box code at the moment?
  10. skippybosco

    skippybosco CGI-Central Partner Staff Member

    Joined:
    Aug 22, 2006
    Messages:
    2,526
    @miso: Not sure if that was intended as a dig on aMember or your trust of the http:// protocol.

    That being said, reducing the amount of customer personal information sent clear text is certainly a good thing ;-)
  11. miso

    miso aMember Pro Customer

    Joined:
    Aug 22, 2006
    Messages:
    543
    I meant it in terms of http protocol... as in, when will any of the aMember's users find themselves needing a highly secure and encrypted protocol of sorts?

    Unless you are browsing all these password protected sites on unsecured wireless networks and letting others snoop your cookies and whatnot... I don't see a problem with regular http connection.
  12. style7

    style7 Member

    Joined:
    Oct 22, 2008
    Messages:
    42
    Thankyou, have now got updated certificates and everything is working fine. Clients feel more secure when they see that the signup page is https. Once I made this change I had more people join!

    Annette
    www.become-stylish.com
  13. kimboy

    kimboy New Member

    Joined:
    May 2, 2011
    Messages:
    20
    Thanks for the screenshot re the certificate. I'm not sure how to get one of these
  14. skippybosco

    skippybosco CGI-Central Partner Staff Member

    Joined:
    Aug 22, 2006
    Messages:
    2,526
    @kimboy: contact your host/support. They should be able to get you sorted.
  15. kimboy

    kimboy New Member

    Joined:
    May 2, 2011
    Messages:
    20
    I do not see such errors.
  16. skippybosco

    skippybosco CGI-Central Partner Staff Member

    Joined:
    Aug 22, 2006
    Messages:
    2,526
    @kimboy, you asked for getting an SSL certificate for your site (so you can use https://).. your host can help you with this.
  17. kimboy

    kimboy New Member

    Joined:
    May 2, 2011
    Messages:
    20
    Thanks for the screenshot re the certificate. I'm not sure how to get one of these
  18. skippybosco

    skippybosco CGI-Central Partner Staff Member

    Joined:
    Aug 22, 2006
    Messages:
    2,526
    @kimboy: contact your host/support. They should be able to get you sorted.

Share This Page