HTTPS Injected into HTTP site?

Viewing 2 replies - 1 through 2 (of 2 total)
  • Anonymous User 16850768

    (@anonymized-16850768)

    3 years, 8 months ago

    It’s possible that your page(s) were accessed over HTTPS (even though there is not a valid certificate) and that resulted in the page(s) being cached with that scheme.

    We’ll be releasing an updated version in a couple weeks (1.4.0) that will support scheme based caching to avoid this type of issue.

    Thread Starter ergoarchitecture

    (@ergoarchitecture)

    3 years, 8 months ago

    Hi Corey,

    I think you are correct. User Thomas on the forum figured this out and helped me with a temporary fix:

    Try to add this to beginning of .htaccess
     
    <IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /
    RewriteCond %{HTTPS} on
    RewriteRule ^(.*)$ http://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]
    </IfModule>
     
    This should check if https is on, and if so, sends the request to non-https = http.

    This seemed to fix it as we have been spot-checking and the problem has not occurred again since we changed our .htaccess file.

    I look forward to the update.

    Steve

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘HTTPS Injected into HTTP site?’ is closed to new replies.

Tags