[sylcollin]

Hello,

I have a page on my website that I can get access to both in HTTP and HTTPS. But when acessing in HTTP, FireFox tells me that the page is not totally secure because of content that is accessed in HTTP inside the page .
After investigating, I found the website http://www.whynopadlock.com, that says part of the problem is the links from bbpress plugin to the bbpress.css and editor.js files. Both of them being in HTTP instead of HTTPS.
I updated the plugin, uninstalled and reinstalled the plugin, but the problem is still here.

When we get the “premium” SSL certificate approved, we would like the green padlock to show, as for the visitors of the website to have no trust issue…as it seems to prevent the padlock to show without “unsecure website” message, we would like to solve this issue quickly…

Anyone had the same issue?
May it need a fix for the plugin, or is there something I should try before?

[John James Jacoby]

Both editor.js and bbpress.css are loaded similarly, as well as other scripts and styles in certain situations (single forums/topics, and when editing your password). Are any other SSL errors present, or is it just bbPress? What version of bbPress are you using?

Without deeper investigation, I’m unsure how this is possible when using core functions and templates. bbp_enqueue_style() calls content_url() which uses set_url_scheme() which is the WordPress core function for correctly determining the http/https/relative scheme for every link on the site. This means it’s difficult for one to be wrong, and another to be right.

[sylcollin]

Just to be clear, both files are wrong (see below). They have the same behaviour.

I updated bbpress to version 2.5.3, and I still have the same issue.
I solved the other issues reported by whynopadlock.com. Only bbpress issues are remaining, here is what whynopadlock.com says:

Total number of items: 45
Number of insecure items: 2

Insecure URL: http://test.paulkampfstudios.com/training/wp-content/plugins/bbpress/templates/default/css/bbpress.css?ver=2.5.3-5249
Found in: https://test.paulkampfstudios.com/training/video-training/purchase/

Insecure URL: http://test.paulkampfstudios.com/training/wp-content/plugins/bbpress/templates/default/js/editor.js?ver=2.5.3-5249
Found in: https://test.paulkampfstudios.com/training/video-training/purchase/

I found about the chrome javascript console after, but it confirms what whynopadlock.com said.

[Stephen Edgar]

This is fixed in the next release of bbPress 2.5.4 and/or 2.6

See https://bbpress.trac.wordpress.org/ticket/2518 for more details and a patch/fix if you want to implement it.

[sylcollin]

Ok, great news it’s fixed in next version!!
Is the release date known for these versions?

[Cars10]

Temp fix as we don’t know if we get a fix any time soon:

file: /wp-content/plugins/bbpress/includes/core/template-functions.php
at 173, INSERT
		//Temp fix
		$located = str_replace( "//", "", $located );
		$located = substr($located, strpos($located, "/"));
before:
// Enqueue the style

[Cars10]

..and same applies for scripts in line 245 (after code above was inserted)