SSL Dashboard tries to load non-SSL links
Permalink
Hi All
I just had an SSL installed yesterday, on my concrete 5 site that was working fine until that point. All customer-facing pages are fine, but if I log in to the dashboard through https - then try to click the Settings icon (to change a page's design/location etc) or the dashboard icon (top-right in browser - the icon with three sliders on) my site hangs and I can never access the content within those pages.
Looking at Chrome developer tools, I then get this error:
Mixed Content: The page at 'https://www.mysite.com/index.php?cID=1' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://www.mysite.com/ccm/system/panels/page?cID=1'. This request has been blocked; the content must be served over HTTPS
I have cleared the concrete 5 cache and also my browser cache and cookies etc - but it makes no difference.
It appears that when those icons are clicked, the url's that are loaded are called through http and not https - which gives rise to the problem. If I manually paste the correct url in the browser bar - eghttps://www.mysite.com/dashboard... - everything loads fine.
Any ideas?
I just had an SSL installed yesterday, on my concrete 5 site that was working fine until that point. All customer-facing pages are fine, but if I log in to the dashboard through https - then try to click the Settings icon (to change a page's design/location etc) or the dashboard icon (top-right in browser - the icon with three sliders on) my site hangs and I can never access the content within those pages.
Looking at Chrome developer tools, I then get this error:
Mixed Content: The page at 'https://www.mysite.com/index.php?cID=1' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://www.mysite.com/ccm/system/panels/page?cID=1'. This request has been blocked; the content must be served over HTTPS
I have cleared the concrete 5 cache and also my browser cache and cookies etc - but it makes no difference.
It appears that when those icons are clicked, the url's that are loaded are called through http and not https - which gives rise to the problem. If I manually paste the correct url in the browser bar - eghttps://www.mysite.com/dashboard... - everything loads fine.
Any ideas?
1. Take a backup of the full mysql db and files
2. Empty the db and delete all files
3. Clean install of Concrete5
4. Empty new db and import mysql backup from step 1
5. Copy across packages folder from files backup
6. Had to re-upload some files into the file manager
I think the problem was caused by me completing the details in System Settings > URLs and Redirection. Once I had put something in there and ticked 'Only render at canonical URLs' I could never get the site working again, even after changing them back and clearing the cache etc.