[Solved] Forums running over https connections

[RGB]

Message from Jan Iversen on dev mailing list:

Hi

I am happy to announce that https://forum.openoffice.org is now open.

All http://forum.openoffice.org request are permanently redirected to
https://forum.openoffice.org

The site has been briefly tested, and the http/https mix problem exist on
forum, just like on wiki.

Thanks to all that helped make this happen.

on behalf of the infrastructure team
jan I.

Normal forum users will no see any difference: every http link will be redirected to https, but this mean greater security on connection, which is important for mods and admins.

NOTE: since yesterday, the wiki is running on https too.

[Hagar Delest]

Note that if you use the [rel] tag instead of the full url when pointing to an address inside the forum, it should be more "transparent" I guess.

[gerard24]

The forum is becoming inaccessible, thus perfectly secure.

[Hagar Delest]

Works fine for me since yesterday evening after last tweaks from RGB.
Forum responsive and no captcha. But still to be fixed, users should not have the same IP.

[RoryOF]

Very slow (glacial) most of today, but OK now.

I agree about the IP. Also logged-on statistics need to be brought back to previous form.

[Villeroy]

Very slow (glacial) most of today, but OK now.

+1

I agree about the IP. Also logged-on statistics need to be brought back to previous form.

+1

[Daiwe01]

I agree about the IP. Also logged-on statistics need to be brought back to previous form.

+1

As posted earlier (viewtopic.php?f=50&t=65448&sid=a09cfdbd ... 6c#p290679, the originator's IP is available in the packet header.

phpBB may also be configured to validate X-Forwarded-For IP in addition to the TCP-level IP.

[RGB]

As posted earlier (viewtopic.php?f=50&t=65448&sid=a09cfdbd ... 6c#p290679, the originator's IP is available in the packet header.

Problem is that do not result evident how to read that info on an easy way.

phpBB may also be configured to validate X-Forwarded-For IP in addition to the TCP-level IP.

It's already configured that way.

[Daiwe01]

As posted earlier (viewtopic.php?f=50&t=65448&sid=a09cfdbd ... 6c#p290679, the originator's IP is available in the packet header.

Problem is that do not result evident how to read that info on an easy way.

Try replacing $_SERVER['REMOTE_ADDR']
in session_begin in session.php
with $_SERVER['HTTP_X_FORWARDED_FOR']

You should test boundary conditions, etc and the usual disclaimers apply

[RGB]

Try replacing $_SERVER['REMOTE_ADDR']
in session_begin in session.php
with $_SERVER['HTTP_X_FORWARDED_FOR']

Thanks, that explain why I was not able to find it

I do not have access to the php configuration files, only to the board configuration. I think that only Imacat can change that.