when i installed bbpress using https:

i could not login bb-admin

and when i tried to login

it brings me back to the top page.

instead i use http to install bbpress again,

all works OK

anyone know what's the problem?

thanks

It's so small though I guess I'll keep it in my bb-tweaks collection.

I'll look to see if a similar bug has been filed first.

Tomek

For some reason the plugin is loading AFTER the pluggable loads, instead of before. I can't quite explain that.

Try renaming the plugin by putting an underscore in front of the name, ie.

_https-mode.php

and make sure it's directly under my-plugins/ and not in a sub-directory under it.

That's the only idea that pops into my head right at the moment.

ps. make sure you are using the newest one so far here:
http://pastebin.com/embed_iframe.php?i=wSYPsdjT

Also, you never mentioned https/SSL before. Maybe looking through these posts will help:

http://bbpress.org/forums/tags/https
http://bbpress.org/forums/tags/ssl

I'm trying to use your fix http://bbpress.org/forums/topic/https-with-bbpress-login#post-23667 + your code above, but get the following error when I try to activate the plugin:

Fatal error: Cannot redeclare bb_validate_auth_cookie() (previously declared in <path to bbPress>/bb-includes/functions.bb-pluggable.php:142) in <path to bbPress>/my-plugins/https-mode.php on line 22

Any ideas?

Thanks!

Tomek

That's a problem! Is there a place to file a bug?

I've also tried installing in a folder that doesn't have a wordpress install, just to see. Still the same. Every time, without fail, it tries to find a path such as, if installed in "forums", it finds "forums/forums". If installed in "sub/forums", it finds "sub/forums/sub/forums".

Where is the issue? I'm getting a little bit frustrated with 'fresh-out-of-the-box' software not working!? I appreciate open-source software, and would love to solve this bug for others as well, but I need help finding it first!

Kinda odd, I would think.

Tomek

My install is two folders down /tomek/forums.

Interestingly, I tried in another browser, going to /bb-admin/index.php manually. This redirected me to the login page as expected. I logged in, and bbPress forwards me to /tomek/forums/tomek/forums/bb-admin/index.php. This, obviously doesn't exist, and would seem to indicate a trailing or starting slash is missing somewhere, but it can't be a redirect problem --- I've turned all those off.

Any idea where to start looking?

Thanks,

Tomek

I have deleted and re-installed several times and still cannot login to admin. I install a fresh install, and try to login to admin with the generated password and nothing. I've cleared my cache, tried different browsers, and still can't login.

I've gone through php my admin, changed the password using MD5 and that doesn't work either. I even tried registering with the same username and email address as admin and it doesn't even tell me that the user exists.

The password reset also doesn't work, I never get the email.

Does anybody have any ideas here?

Thanks,
Nick

So add this to the bottom of the plugin for 1.x

function bb_validate_auth_cookie( $cookie = '', $scheme = 'auth' ) {
	global $wp_auth_object;
	return $wp_auth_object->validate_auth_cookie( $cookie, $scheme );
}

Test it carefully of course.

view: http://pastebin.com/embed_iframe.php?i=wSYPsdjT

download: http://pastebin.com/download.php?i=wSYPsdjT

But I think the problem is that the admin section must be checking the base url somewhere for security that I am not catching and doesn't like it, so it redirects it.

My current guess is it's happening in function bb_auth which I am examining now.

Ah it's probably because bbPress 1.x has the secure_auth cookie where 0.9 does not, makes things much more complicated since you have to be logged in under SSL as well.

I just made some tests with your modification, but the problem with bb-admin persisted.

Anyway, I'm happy with the current achievements, the forum working with SSL is pretty nice, and normally I just use the administration part at home or work (in a safe network).

Maybe one of us should fill a bug report for the https on the bugtracker?

Thanks for all the help and I'm glad to see you back in the forums.

:)

Someone (ahem, Sam?) hard coded the url for bb-admin and worse than that, they did it as a relative url, instead of full url, so my little plugin can't detect the page is in https mode.

example:
$uri = bb_get_uri('bb-admin/delete-post.php'

right there, wow, hardcoding, after all that nonsense with even more CONSTANTS for all those silly paths.

So, what we need is to detect when bb-admin is being requested and convert it back out of the relative url into a full url.

I just noticed that also the controls for Sticky, delete topic, lock and unlock are not working, when you click on those links or in the link of admin panel, I'm redirected to the base address (still on https).

This only occurs when I'm logged in as admin. If I'm with guest access I can go to /bb-admin and see the login screen.

This is my ssl apache log:
my_ip - - [07/Jun/2010:17:05:13 -0300] "GET /bb-admin HTTP/1.1" 301 328
my_ip - - [07/Jun/2010:17:05:14 -0300] "GET /bb-admin/ HTTP/1.1" 302 -
my_ip - - [07/Jun/2010:17:05:16 -0300] "GET / HTTP/1.1" 200 23610
my_ip - - [07/Jun/2010:17:05:18 -0300] "GET /favicon.ico HTTP/1.1" 404 2715

In a short way (and probably wrong), it looks like a 301 redirect for /bb-admin/(.*) to /

But this only happens logged in as admin, on https trying to access anything inside of /bb-admin (the rest seems to work as it should).

Using http everything is fine.

Thanks!

Can you tell me more specifically how it fails on admin?

Everything works fine, except for the /bb-admin part using https. This page seens to redirect to the main forum, but switching to http works ok. (This is not a big problem, since my main objective was to have only the forum with ssl).

Just for the record (if someone else is searching for this):
The canonical modification can be made editing the header.php of the template and inserting the following line in the head section.
<link rel="canonical" href="<?php echo "http://" . $_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"]; ?>" />

edit: this line look a bit messed here, check the original at pastebin: http://pastebin.com/626EqW74

Thank you! :)

Edit: nevermind. You edit the post.

ah here it was:

http://bbpress.org/forums/topic/https-with-bbpress-login#post-23667