Xoops Cube​/Hack​/HTTPS (E)

Method of using HTTPS when login or change password

Edit mainfile.php

add XOOPS_SSL_URL

ex.) define('XOOPS_SSL_URL', 'https://www.nsl.tuis.ac.jp/xoops');

　change [ include/functions.php xoops_refcheck() ] for evaide REFERER error.

158,164c158
> 
>     // Fumi.Iseki
>     $ref = preg_replace("/^https:/i", "http:", $ref);
>     $url = preg_replace("/^https:/i", "http:", XOOPS_URL);
> 
>     //if (strpos($ref, XOOPS_URL) !== 0 ) {
>     if (strpos($ref, $url) !== 0 ) {
---
<     if (strpos($ref, XOOPS_URL) !== 0 ) {

Edit template files of User module

• user_default.html

  -<form action="<{$xoops_url}>/user.php" method="post">
  +<form action="<{$smarty.const.XOOPS_SSL_URL}>/user.php" method="post">

• user_block_login.html

  -<form action="<{$xoops_url}>/user.php" method="post" style="margin-top: 0px;">
  +<form action="<{$smarty.const.XOOPS_SSL_URL}>/user.php" method="post" style="margin-top: 0px;">

• user_edituser.html

  -<form action="#" method="post">
  +<form action="<{$smarty.const.XOOPS_SSL_URL}>/edituser.php" method="post">

• user_register_form.html

  -<form action="#" method="post">
  +<form action="<{$smarty.const.XOOPS_SSL_URL}>/register.php" method="post">