MyBB Community Forums
Why should I include the full URL in bburl? - Printable Version

+- MyBB Community Forums (https://community.mybb.com)
+-- Forum: Community Archive (https://community.mybb.com/forum-106.html)
+--- Forum: Archived Forums (https://community.mybb.com/forum-143.html)
+---- Forum: Archived Development and Support (https://community.mybb.com/forum-155.html)
+----- Forum: MyBB 1.6 (https://community.mybb.com/forum-138.html)
+------ Forum: 1.6 Suggestions and Feedback (https://community.mybb.com/forum-7.html)
+------ Thread: Why should I include the full URL in bburl? (/thread-148680.html)



Why should I include the full URL in bburl? - genodeftest - 2013-12-05

For the Board URL, aka
$mybb->settings['bburl']
, the Admin Control panel tells me this:
Quote:The url to your forums.
Include the http://. Do NOT include a trailing slash.
Can anyone please explain to me why I need the http:// ? Will it break something if I change that?

Rationale:
I've got a Forum available over HTTP and HTTPS. I want the user to decide which one he/she uses. If the user browses to http://url-to-my-forum.tld, he should only get Non-HTTPS content. If the user browses to https://url-to-my-forum.tld, he should only get HTTPS content.


RE: Why should I include the full URL in bburl? - Cameron:D - 2013-12-06

You could set your forum URL to //url-to-my-forum.tld, that will be protocol-relative so if they are using HTTP they will see HTTP links, if they use HTTPS then they'll see HTTPS links.

One question, why run both? If you have an SSL certificate why not just force HTTPS for all users, continuing to offer HTTP will make i easy to negate any security improvements you'd otherwise get (Assuming cookies aren't set to be HTTPS-only).


RE: Why should I include the full URL in bburl? - genodeftest - 2013-12-06

At the moment I just have a CaCert.org certificate which will cause severe warnings in some browsers. For using HTTPS only I would need to buy a certificate which I don't own at the moment. The audience of my forum may be scared by those SSL cert warings from my cacert certificate.


RE: Why should I include the full URL in bburl? - StefanT - 2013-12-07

(2013-12-06, 10:16 AM)Cameron:D Wrote: You could set your forum URL to //url-to-my-forum.tld, that will be protocol-relative so if they are using HTTP they will see HTTP links, if they use HTTPS then they'll see HTTPS links.
However the links in notification mails could be broken. I don't think all mail clients support protocol-relative links.


RE: Why should I include the full URL in bburl? - genodeftest - 2013-12-07

Ok, thanks for your help. So I should switch to a SSL-only connection as soon as possible.