Forum Entry Bug

[Godra]

I edited my previous post so try following those steps in Chrome.

It was recreated several times in the past 15 minutes.

[Archie]

In Chrome, I can recreate it by just following the link from the 1st post, by AabeckControls, and clicking on Support Questions (or any other category).

This seems to be true only if I'm not logged in to the forum or if I log out, clear browsing data and access the forum page again.

I tried this in Chrome and I do not get the error. I then tried in FireFox and it DOES give me the error, so I am going to call tech support with this information. Thanks for the steps to replicate.

[Godra]

Here is one more piece of information:

The link from the 1st post actually connects to the page as Not Secure and seems to maintain that even if I add "www." at the beginning or remove "#c1" at the end, and press Enter button.

See the attached picture.

[Archie]

They just made an adjustment and I can no longer repeat the error. Does anyone else still see it?

[Godra]

It seems to be working now but the "Not Secure" part seems to still exist (even if the address is typed as: "http://advancedhmi.com/forum/").

[Archie]

It seems to be working now but the "Not Secure" part seems to still exist (even if the address is typed as: http://advancedhmi.com/forum/).

I'm not sure why the browser is not changing it once it sees it is a secure site, but it should change it to
https://www.advancedhmi.com/forum/

[Godra]

Microsoft Edge showed the same, so it seems to be the way server responds.

[Archie]

Microsoft Edge showed the same, so it seems to be the way server responds.

I get the same thing, so I guess the first entry into the forum lets you go in unsecured but clicking any link then changes to secured.

[Godra]

Not sure if that bug could be exploited by some malicious people to hack your website.

[Archie]

Not sure if that bug could be exploited by some malicious people to hack your website.

I'm sure its a possibility. It looks like this problem has been around for a while:

https://wiki.simplemachines.org/smf/Mod_security_-_Having_problems_with_mod_security

[Godra]

It doesn't do the same with this address:

http://advancedhmi.com/documentation/index.php?title=Main_Page

It switches correctly to https.

But it did the same on your main site, with this address:

http://advancedhmi.com/index.php?main_page=index&cPath=1

[Godra]

Maybe a simple solution might be to make sure that all http requests are converted to https by the server.

This regardless of whether it's www.advancedhmi.com or advancedhmi.com.

[bachphi]

Agreed. All bank, financial sites do that automatically, convert http to https.
To Phrog James's point, a new or casual user will not have a bookmark,  so it's would be a frustration for those users.

FYI, things are better for me with bookmark of https://advancedhmi.com/forum/