Classified logins/browsers

splitimageview

splitimageview

coincidence rangefinder
Staff member
Local time
5:56 PM
Joined
Aug 30, 2007
Messages
9,778
Interested to see what others are experiencing.

Here is my report:

Performed some tests on the classifieds using various browsers, after not being able to post any comments on ads or post ads using my normal browser (Safari.)

All these browsers performed similarly:

Safari, Chrome, Brave on MacOS and iOS

Dissenter, Min, Vivaldi, Edge on MacOS

Duck Duck Go on iOS

1. In all cases "Remember Me?" is checked.

2. If logged into the main site, clicking on the classifieds tab switches to the classifieds page but the account is now logged out.

3. After being logged out via #2, clicking on the main site (i.e., the Home tab), the main page loads and the account is logged in again.

4. After clicking on the classifieds tab, logging in on that page will bring up the rff index page for some reason (rangefinderforum dot com/forums/index.php) instead of the classifieds page; clicking on the classifieds tab AGAIN to go back to classifieds simply results in a log-out.

The only browsers that have worked seamlessly/successfully and didn't exhibit this behavior are Firefox and Tor Browser.
 
I can confirm that it behaves the same way for me, tested on a variety of different devices, browsers, and operating systems.
 
As posted in several separate threads,

Edge on Windows seems to be the best browser for RFF and our classifieds

all but flawless.
 
Unfortunately that isn't an option for many, so I thought I'd do some testing.

Curious if others are seeing these same results with Firefox on MacOS.

Forgot to mention that Firefox on iOS is also a fail...

Since it always seems to fail in the same manner, this should be straightforward to debug.
 
A few problems I see that could be causing issues related to this:

The links in the nav bar and on the home page to the classifieds (http://www.rangefinderforum.com/photopost-classifieds) is http rather than https (but https://www.rangefinderforum.com/photopost-classifieds works fine).

The login form target on the classifieds page points to an insecure (http instead of https) url.

The form action on the home page is action="/forums/login.php?do=login" while the form action on the classifieds page is action="http://www.rangefinderforum.com/forums/login.php?do=login

The form action on the home page has it right by using a relative path instead of a hardcoded url.
 
rff works normally - when I go to classifieds my banner says
not secure - rangefinderforum.com
everything functions normally other than that
 
enasniearth said:
rff works normally - when I go to classifieds my banner says
not secure - rangefinderforum.com
everything functions normally other than that
Click to expand...

This is due to the links on the home page to the classifieds page pointing to insecure links. Most (maybe all at this point) modern browsers will say a page that is not served over https is not secure. If a browser does not report this it does not mean the page is secure. Requests over plain http are not encrypted and not secure for that reason. Not a big deal for text and images but important for things like forms that collect passwords.
 
Creagerj said:
This is due to the links on the home page to the classifieds page pointing to insecure links. Most (maybe all at this point) modern browsers will say a page that is not served over https is not secure. If a browser does not report this it does not mean the page is secure. Requests over plain http are not encrypted and not secure for that reason. Not a big deal for text and images but important for things like forms that collect passwords.
Click to expand...

Not sure that is the only reason.

RFF points to tens of thousands of pics on unsecure web sites.
I know of no way to make those links secure.
 
Creagerj said:
A few problems I see that could be causing issues related to this:

The links in the nav bar and on the home page to the classifieds (http://www.rangefinderforum.com/photopost-classifieds) is http rather than https (but https://www.rangefinderforum.com/photopost-classifieds works fine).

The login form target on the classifieds page points to an insecure (http instead of https) url.

The form action on the home page is action="/forums/login.php?do=login" while the form action on the classifieds page is action="http://www.rangefinderforum.com/forums/login.php?do=login

The form action on the home page has it right by using a relative path instead of a hardcoded url.
Click to expand...

Thanks,

I will discuss this with our tech guy.

Hopefully the front page links will be https by Monday.
 
Stephen,
Trying to place an ad this morning, and none of my browsers will allow me to stay logged in to the classified section - Safari. Firefox and Edge.
I can actually log on to the classifieds with Firefox, but when I enter my ad and click the "place ad" button, it kicks me out to a log in page.
With the other two browsers, I cannot even log in the classifieds at all. The rest of the forum, yes. But not the Classifieds.

-Hank
 
You must log in or register to reply here.
Back
Top Bottom