MyBB Community Forums

Full Version: Why should I include the full URL in bburl?
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
For the Board URL, aka
$mybb->settings['bburl']
, the Admin Control panel tells me this:
Quote:The url to your forums.
Include the http://. Do NOT include a trailing slash.
Can anyone please explain to me why I need the http:// ? Will it break something if I change that?

Rationale:
I've got a Forum available over HTTP and HTTPS. I want the user to decide which one he/she uses. If the user browses to http://url-to-my-forum.tld, he should only get Non-HTTPS content. If the user browses to https://url-to-my-forum.tld, he should only get HTTPS content.
You could set your forum URL to //url-to-my-forum.tld, that will be protocol-relative so if they are using HTTP they will see HTTP links, if they use HTTPS then they'll see HTTPS links.

One question, why run both? If you have an SSL certificate why not just force HTTPS for all users, continuing to offer HTTP will make i easy to negate any security improvements you'd otherwise get (Assuming cookies aren't set to be HTTPS-only).
At the moment I just have a CaCert.org certificate which will cause severe warnings in some browsers. For using HTTPS only I would need to buy a certificate which I don't own at the moment. The audience of my forum may be scared by those SSL cert warings from my cacert certificate.
(2013-12-06, 10:16 AM)Cameron:D Wrote: [ -> ]You could set your forum URL to //url-to-my-forum.tld, that will be protocol-relative so if they are using HTTP they will see HTTP links, if they use HTTPS then they'll see HTTPS links.
However the links in notification mails could be broken. I don't think all mail clients support protocol-relative links.
Ok, thanks for your help. So I should switch to a SSL-only connection as soon as possible.