HBC Website not displaying properly via HTTPS due to recent SSL implementation

[caddisguy]

I see the problem now.

Historically HBC did not have an SSL certificate and as such, the web server was never listening on port 443 for HTTPS connections.

I see that on October 11th an SSL certificate was generated on the server through cPanel and the server now accepts HTTPS connections on 443. However, the page does not display correctly because:

Reviewing the source code, I see that the JavaScript / CSS is included through hard linked using "http://". For example:


type="text/css" href="http://www.huntingbc.ca/forum/css.php?styleid=6&langid=1&d=1417480928&am p;td=ltr&sheet=additional.css


The browser will not allow insecure items (ie: items loaded via HTTP) to be displayed when you are visiting the site through HTTPS (ie: https://huntingbc.ca)

Rather than hard linking using http:// and FQDN, it should be linked like this:

type="text/css" href="/forum/css.php?styleid=6&langid=1&d=1417480928&am p;td=ltr&sheet=additional.css

(If the application automatically adds the http://www.huntingbc.ca because it grabs it from a database or some other setting, that setting will need to be changed to https://www.huntingbc.ca)

The browser will then automatically assume the https://huntingbc.ca OR http://huntingbc.ca based on whichever was used when the visitor originally landed on the page.


A work-around for those affected is to type in "http://huntingbc.ca" into their browser. If you just type in "huntingbc.ca" most modern web browsers (newer versions of Chrome) will automatically try https:// first, so the site will load with the broken CSS / theme / image links due to the issue I described.

Note that you will even see this in Firefox IF you add the https prefix, ie: https://huntingbc.ca ... Also, the broken HTTPS instance of the website will end up getting indexed and preferred by search engines, so soon all traffic from search engines will hit the broken page.

This is definitely a site issue and is a result of that SSL certificate being installed on October 11th.

Marc will need to reach out to his webmaster to either revert that change that was made October 11 or fix all of the insecure links that are hard coded within the site.

I am happy to assist the webmaster in any way. Don't hesitate to reach out via PM.


https://i.imgur.com/hSCvypO.jpg

https://i.imgur.com/ubaOofC.jpg

[HarryToolips]

I was wondering what changed, thanks for clarifying that... I tried what you said, still didn't work for me...I hope they get it fixed soon, very irritating trying to post on any thread or PM...cheers.

[caddisguy]

I was wondering what changed, thanks for clarifying that... I tried what you said, still didn't work for me...I hope they get it fixed soon, very irritating trying to post on any thread or PM...cheers.

Yeah it seems some browsers will still try https:// even when you type http://

Marc will need to reach out to the webmaster to either revert the SSL certificate installation that occurred on the 11th or fix all the embedded http:// links that prevent content from loading while using https://

Happy to help if needed. I do this stuff for a living and work with Linux / Apache / cPanel etc on a daily basis. No charge :)

[MB_Boy]

There is a work around that Whonnock posted in the thread about laptop not displaying properly. Page 4.

[caddisguy]

There is a work around that Whonnock posted in the thread about laptop not displaying properly. Page 4.

That will work for some. I'll quote it here in this thread for people to see:

"In the google search bar there is a little padlock on the left side. Click on it and go to site settings. You have to be at the huntingbc home page, bIn the google search bar there is a little padlock on the left side. Click on it and go to site settings. You have to be at the huntingbc home page, but not necessarily logged in. In the new page scroll down to 'insecure content' and allow. When logging back in, if needed, it will advise that your entering an insecure site and will ask if you want to send the information any ways.ut not necessarily logged in. In the new page scroll down to 'insecure content' and allow. When logging back in, if needed, it will advise that your entering an insecure site and will ask if you want to send the information any ways." - Whonnock Boy

^^^ This will tell the browser to load those embedded http:// links.

Older browsers used to throw a pop-up that asked if you would "like to display secure and insecure items" but most newer ones just default to silently not displaying the content

[high horse Hal]

" You have to be at the huntingbc home page, bIn the google search bar there is a little padlock on the left side. Click on it and go to site settings. You have to be at the huntingbc home page, but not necessarily logged in. In the new page scroll down to 'insecure content' and allow. When logging back in, if needed, it will advise that your entering an insecure site and will ask if you want to send the information any ways."

that worked, thanks

[Arctic Lake]

I tried to look at Hunting BC on my laptop the other day . It looked prehistoric ! Sorry have not read the above replies . Hope it’s an easy fix !
Arctic Lake

[MB_Boy]

I tried to look at Hunting BC on my laptop the other day . It looked prehistoric ! Sorry have not read the above replies . Hope it’s an easy fix !
Arctic Lake

Try doing what Whonnock posted in post #39 in this thread.

http://www.huntingbc.ca/forum/showthread.php?175603-Weird-on-laptop/page4

[Arctic Lake]

Thank You I’m usually on here with my iPad but when I posted pictures of my moose hunt I tried doing it from my laptop and saw the wired home page and said OhOh
Arctic Lake
Try doing what Whonnock posted in post #39 in this thread.

http://www.huntingbc.ca/forum/showthread.php?175603-Weird-on-laptop/page4

[guntech]

I can not navigate my android phone to see HBC...too complicated for me...

No problem with my computer at home though, no changes ... so just no viewing while away from home now ... no big deal...

[FishandSticks]

Does not work on my android or chrome on computer.

Have to go though Microsoft Edge to get the site to load properly, this seems to work.

[fozzy]

The problem seems to be fixed now, displays again properly on my PC.

[RiverOtter]

The problem seems to be fixed now, displays again properly on my PC.Not on Android. For a few days if I switched to DDG as a web browser the site/pages would load properly. Now nothing seems to work. This can't be that hard of an issue to fix. Any mods reading this that could provide an update on the issue and if a fix is on the horizon? Cheers.

[RiverOtter]

Interesting.... I swung by here and had to navigate through a bunch of spaghetti to reply to this thread, then when I hit send I get a pop-up saying my info isn't secure and get kicked out. Go back to bookmarked pages and click on HBC and everything looks normal via Chrome again. :confused::confused:

[islandhunter]

Marc, can you set up a thung to donate to update this site? I will glady chip in!Its too painful to navigate these days (although I'm still here!)

[HarryToolips]

It loads normal on my PC using Google Chrome but on my android it's still messed up...

[guntech]

It loads normal on my PC using Google Chrome but on my android it's still messed up...

Same here... PC works with various browsers... android does not...

[high horse Hal]

Marc, can you set up a thung to donate to update this site? I will glady chip in!Its too painful to navigate these days (although I'm still here!)to say nothing about the bots and trackers that jump on with an unsecured site

[mike31154]

I have a ! Not secure icon next to the URL box on my browser (Edge). No https or even http preceding the URL, just www. Don't use the forum on my phone. The only solution is a software update by the site owner. It's a dinosaur. Costs $$$$ for an update like that.

The site is currently at vBulletin 4, latest version is 6.


Powered by vBulletin® (https://www.vbulletin.com/)
Version 4.2.2
Copyright © 2023 vBulletin Solutions, Inc. All rights reserved.

[tri777]

How come i have zilch/nada issues on both Android or PC ? ?

[mike31154]

How come i have zilch/nada issues on both Android or PC ? ?
Depends on the browser you use I think. On my phone it works fine with Edge but both Chrome & the native Samsung internet browser are messed up. Most tablets & phones use a generic browser that may not be compatible, you got lucky I guess.

[tri777]

Depends on the browser you use I think. On my phone it works fine with Edge but both Chrome & the native Samsung internet browser are messed up. Most tablets & phones use a generic browser that may not be compatible, you got lucky I guess.

Wouldn't that be the tell that it's the user's device having software issue, and not HBO having issues?

[mike31154]

Wouldn't that be the tell that it's the user's device having software issue, and not HBO having issues?

Partly. The device (hardware) is dependent on software. I had to install the Edge app as an option. The default Samsung browser works fine with other websites. So the combination of outdated vBulletin forum software with incompatible browser software is the issue, not the device hardware. Companies selling hardware like Samsung use 3rd party browsers pre-installed in the device & don't update them as regularly as a software company like Microsoft or Google. A gap between version 4 & 6 in vBulletin is massive. The site owner needs to get with the program..... or not. I never use anything but my computer & Edge browser for HBC so don't much care.

[FishandSticks]

Well EDGE updated this morning now it won't load all the background and graphics again, so back to a "NOT Secure" google

[mike31154]

Not secure Edge working on my Windows notebook just fine.

[WhiteTailAB]

This is stupid. It works on my PC but not my phone and I wish it was fixed cause I browse a lot on my phone ffs.

[mike31154]

Not secure Edge working on my Windows notebook just fine.

Ok haha, Edge just updated on my notebook & now it's messed up. Time to eat crow, switched to Chrome & it's good.... ;)

[mike31154]

Now Chrome is messed up too. If the site owner doesn't update to a secure platform I can see a lot of folks no longer using it, including myself. Once the sponsors see membership is bleeding away, perhaps that will be a catalyst to upgrade. See ya. ;)

[180grainer]

Now Chrome is messed up too. If the site owner doesn't update to a secure platform I can see a lot of folks no longer using it, including myself. Once the sponsors see membership is bleeding away, perhaps that will be a catalyst to upgrade. See ya. ;)
It's your browser.

[tri777]

It's your browser.

I agree !
A poll should be posted on how many are having issues V.S. those not.

[Gateholio]

My browser updated yesterday and I’m in the same boat. Can only view HBC on my phone. Hopefully Marc can find a resolution soon so all our problems go away :)

[mike31154]

My browser updated yesterday and I’m in the same boat. Can only view HBC on my phone. Hopefully Marc can find a resolution soon so all our problems go away :)

I found a workaround after the update. It seems when I click the shortcut I saved for HBC the Edge browser automatically adds an 's' to http in the address bar URL & the site is completely messed up. I simply clicked on the URL, deleted the 's' & hit Enter. The URL then reverts to Not Secure http***** and it displays normally again. Only had to do that once, the shortcut works now without me having to edit.

Something like this has the potential to make a lot of folks throw in the towel. I almost did. Hunting season all but over & I can go to YouTube myself to get the videos posted to most of the open chat & politics threads. Don't need HBC posts to spoon feed me that stuff. ;)

[Gateholio]

I found a workaround after the update. It seems when I click the shortcut I saved for HBC the Edge browser automatically adds an 's' to http in the address bar URL & the site is completely messed up. I simply clicked on the URL, deleted the 's' & hit Enter. The URL then reverts to Not Secure http***** and it displays normally again. Only had to do that once, the shortcut works now without me having to edit.

Something like this has the potential to make a lot of folks throw in the towel. I almost did. Hunting season all but over & I can go to YouTube myself to get the videos posted to most of the open chat & politics threads. Don't need HBC posts to spoon feed me that stuff. ;)


Wow it works

Good hack!

[MRP]

^^^^ works but I have to delete it every time I change the page.

[Ambush]

Flip flops between working and not on Chrome and Edge on my laptop. When it comes up goofy, I just go away and try again in a few days.

Member logins have steadily declined over the past year or two for obvious reasons. Maybe not enough revenue now to justify urgently needed upgrades? Once the Death Splral starts, it’s pretty hard to stop it. Too bad.

[Kb65]

this site is not working on my end (?)...has this been fixed yet...and or am I doing something wrong...Thanks

[guntech]

this site is not working on my end (?)...has this been fixed yet...and or am I doing something wrong...Thanks

It's HBC... works fine on my computer with Firefox (Not with Edge) but not with my phone. Both my phone and computer (Firefox) work on every other site I go to.

[tri777]

Still no issues with HBO for me..
PC running with Firefox & Cell Android running Google Chrome.

[180grainer]

I agree !
A poll should be posted on how many are having issues V.S. those not.
When it first started happening, it would only do it to Rebel News. Then HBC. Everything else was fine. I use Brave and can't remember what I did, but you can google this issue and find the resolution. It worked for me. Maybe it will work for others.

[180grainer]

I found a workaround after the update. It seems when I click the shortcut I saved for HBC the Edge browser automatically adds an 's' to http in the address bar URL & the site is completely messed up. I simply clicked on the URL, deleted the 's' & hit Enter. The URL then reverts to Not Secure http***** and it displays normally again. Only had to do that once, the shortcut works now without me having to edit.

Something like this has the potential to make a lot of folks throw in the towel. I almost did. Hunting season all but over & I can go to YouTube myself to get the videos posted to most of the open chat & politics threads. Don't need HBC posts to spoon feed me that stuff. ;)
That's funny right there. :)

[caddisguy]

I kind of forgot about it all until I saw srupp's post and then another OG HBC member texted me today asking about it. Helped him get in with the work-around (see http://www.huntingbc.ca/forum/showthread.php?176282-Steve-Rupp/page3 for picture / instruction tutorial) but the reality is that many have given up and new users coming across the site don't stand much chance signing up or sticking around. People being unable to load this site has been a topic on other forums and facebook groups, so it's definitely a pressing issue.

I'll reach out to Marc tomorrow. I think I might have dropped the telephone tag ball a couple months back. Should be a 5 minute fix on the backend. Maybe a bit more if it's shared hosting / shared IP but I've been doing this for a living for 20+ years (sad life I know) and my IT support for HBC is free. My way of giving back.

Hopefully we can work together to knock this out and keep the site going.

[Ambush]

My phone is fine, my laptop hasn’t been good for two months even after doing your end run. (but thanks for that)

HBC has been averaging less than fifty members at a time for several months now, so interest had definitely waned steadily and for several reasons. Archaic technology sure hasn’t helped, but maybe it’s too little too late.

[caddisguy]

My phone is fine, my laptop hasn’t been good for two months even after doing your end run. (but thanks for that)

HBC has been averaging less than fifty members at a time for several months now, so interest had definitely waned steadily and for several reasons. Archaic technology sure hasn’t helped, but maybe it’s too little too late.

Fixing the SSL issue would be the first thing. I'm 99.9% certain what happened is cPanel/WHM (the hosting control panel layer that runs out this server) defaulted to SSL being enabled with auto-generated Lets Encrypt certificates. Disabling that will immediately fix the issue people are having, but with a few adjustments, the site will work with SSL and this will help with search engine rankings and such (and get rid of the "Not Secure" warning)

Upgrading Vbulletin from 4.2 -> 5 -> 6 will make things a little more modern.

There are lots of popping forums out there (the classic web based ones) ... I think a little TLC will go along way, but it's the SSL that started in October which is the main reason for the drop in traffic.

[FishandSticks]

Got a new Google pix 8 could not get the site to load, kept adding a s to http.

Went back to old Samsung s8

[caddisguy]

Got a new Google pix 8 could not get the site to load, kept adding a s to http.

Went back to old Samsung s8

This should be fixed on the back end in the near future. Will keep you updated.