System Updates Thread ...7/21/20 . Security and Pictures

AddieJoss · #1 07-19-2020, 10:15 AM

Leon, like everyone else, I appreciate what you provide on Net54. I’m not sure if it’s related, but when I logon, in the URL area, it’s says “not secure”. I believe a security certificate makes it secure. I know that doesn’t solve everything but an easy fix and will definitely help. Just a quick thought.

Leon · #2 07-19-2020, 10:23 AM

Quote:

Originally Posted by AddieJoss

Leon, like everyone else, I appreciate what you provide on Net54. I�m not sure if it�s related, but when I logon, in the URL area, it�s says �not secure�. I believe a security certificate makes it secure. I know that doesn�t solve everything but an easy fix and will definitely help. Just a quick thought.

It is secure. Click on the url and you will see the https....on a cell phone it shows the lock. WE have old links that are http and not https which is why you don't see the lock.....hopefully that can get figured out too but not too important as the secure certificate is there...

RedSox3 · #3 07-19-2020, 01:31 PM

There's a Secure Sockets Layer (SSL) certificate in place, effective for about another 6 months.

A utility website, http://whynopadlock.com (enter net54baseball.com and click the "I'm not a robot" checkbox) shows that all the pieces of the puzzle are in place except one:

"Protocols: You currently have TLSv1 enabled. This version of TLS is being phased out. This warning won't break your padlock, however if you run an eCommerce site, PCI requirements state that TLSv1 must be disabled by June 30, 2018."

This doesn't sound like something we can fix ourselves, and the web hosting system administrators should probably do something about it.

What we found on the OBC site was that if there are any references to "http://" in any script producing a web page in the net54baseball.com domain, they should be changed to "https://" in the program script files. OBC had several dozen of those protocols that needed to be changed. I don't think users can easily change the vBulletin script files, and any changes would be overwritten when a newer version of vBulletin is installed.

In the meantime, as Leon said, even though the browser warns "Not secure," it'll behave like a regular secure website.

Best,
WMD

Wayne Delia, Webmaster, OBC (Old Baseball Cards), https://oldbaseball.com

Leon · #4 07-19-2020, 02:01 PM

Quote:

Originally Posted by RedSox3

There's a Secure Sockets Layer (SSL) certificate in place, effective for about another 6 months.

A utility website, http://whynopadlock.com (enter net54baseball.com and click the "I'm not a robot" checkbox) shows that all the pieces of the puzzle are in place except one:

"Protocols: You currently have TLSv1 enabled. This version of TLS is being phased out. This warning won't break your padlock, however if you run an eCommerce site, PCI requirements state that TLSv1 must be disabled by June 30, 2018."

This doesn't sound like something we can fix ourselves, and the web hosting system administrators should probably do something about it.

What we found on the OBC site was that if there are any references to "http://" in any script producing a web page in the net54baseball.com domain, they should be changed to "https://" in the program script files. OBC had several dozen of those protocols that needed to be changed. I don't think users can easily change the vBulletin script files, and any changes would be overwritten when a newer version of vBulletin is installed.

In the meantime, as Leon said, even though the browser warns "Not secure," it'll behave like a regular secure website.

Best,
WMD

Wayne Delia, Webmaster, OBC (Old Baseball Cards), https://oldbaseball.com

Hey Wayne
The hosting company is currently restoring the attachment DB and doing what you had said to do. It is taking quite a bit of time..

I am not sure how to fix the HTTPS/lock issue as we have thousands (probably) of links that are http....
thanks again

.

Ronnie73 · #5 07-20-2020, 12:50 AM

Quote:

Originally Posted by Leon

I am not sure how to fix the HTTPS/lock issue as we have thousands (probably) of links that are http....
thanks again

I've used a program in the past from funduc.com that's a search and replace application. I've used it for similar changes such as updating a copyright date. It searches all the code and gives you the option to view each found example and apply the change one by one or you can change everything found with one click. It's also helpful when searching for certain code within a website and finding exactly what you were searching for and where it is. It saves a ton of time, especially when your dealing with a website that has many files. One of my websites has over 2500 files of code and it worked super fast every time I ever used it.

Leon · #6 07-20-2020, 07:22 AM

Quote:

Originally Posted by Ronnie73

I've used a program in the past from funduc.com that's a search and replace application. I've used it for similar changes such as updating a copyright date. It searches all the code and gives you the option to view each found example and apply the change one by one or you can change everything found with one click. It's also helpful when searching for certain code within a website and finding exactly what you were searching for and where it is. It saves a ton of time, especially when your dealing with a website that has many files. One of my websites has over 2500 files of code and it worked super fast every time I ever used it.

Thanks Ron. I will look into it

I am also very aware of the issues the site security warning when logging in. They are being addressed. The site does have a security certificate. Just click through the security stuff. It only has to do with old http vs. https code. And on a mobile phone the lock shows.

Just spoke to the hosting company again...915am CST....they have applied the latest security cert but since they are not positive it will fix this I don't want to take the site down now for a reboot to apply the fix. The reboot is going to be done at 3am EST.....

.

Rich Klein · #7 07-20-2020, 09:23 AM

I think Richard "Dimples" Fields said all we need to know about Leon's month with this song

https://www.youtube.com/watch?v=qduCJYilnaY

Regards
Rich

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Site issues	Leon	Net54baseball Vintage (WWII & Older) Baseball Cards & New Member Introductions	4	06-30-2018 05:29 AM
Site issues....	Leon	Net54baseball Vintage (WWII & Older) Baseball Cards & New Member Introductions	1	06-12-2018 01:10 PM
Site technical issues	Leon	Net54baseball Vintage (WWII & Older) Baseball Cards & New Member Introductions	0	05-02-2016 10:46 AM
Issues with REA site?	cubsguy1969	Net54baseball Vintage (WWII & Older) Baseball Cards & New Member Introductions	14	05-09-2013 12:50 PM
Site operations issues a little while ago	Leon	Net54baseball Sports (Primarily) Vintage Memorabilia Forum incl. Game Used	7	05-06-2012 09:52 PM