[Security] SSL Issues

[Koreano]

Recently released a forum.
As I have a SSL certificate installed, the website is running through SSL.
Seems as though some functions are having issues, like quick reply, because of the forced SSL traffic we made via the htcaccess file.

Any plugins people recommend to fix these issues?
Isn't there a plugin for forcing images to all be https?

[Devilshakerz]

DVZ Secure Content plugin for blocking insecure resources from being displayed in content (posts, signatures, avatars): http://community.mybb.com/mods.php?action=view&pid=450
You would also need to modify your theme (CSS and templates) replacing http:// to https:// (or the protocol-less, adaptive version //).

Alternatively, you can use the solution provided in http://community.mybb.com/thread-162572-...pid1116582, which requires a camo (server-side image proxy requesting resources over HTTP and returning them to the browser over HTTPS).

After making sure your forum is working correctly over HTTPS, add security headers:
https://www.owasp.org/index.php/OWASP_Se...ab=Headers, also described at
https://scotthelme.co.uk/hardening-your-...e-headers/

If you are using CloudFlare or similar reverse proxy, make sure the connection between their servers and yours is always being encrypted and the certificate used is being properly validated.