http://wpmarketing.org/forum/tags/security Wordpress for Internet and Affiliate Marketing en-US Tue, 07 Feb 2012 21:29:47 +0000 http://bbpress.org/?v=1.0.2 q http://wpmarketing.org/forum/search.php http://wpmarketing.org/forum/topic/running-wp-admin-over-ssl-and-mixed-content-issue#post-271 Sun, 30 Jan 2011 06:01:22 +0000 nitaonline 271@http://wpmarketing.org/forum/ <p>Hi, first of all: kudos for the Hana Code Insert Plugin. In our case, our members need to fill out professional details at registration, and since access over WiFi hotspots isn't always secure, we've decided to run all of the wp-admin backend over SSL (with a cert and static IP of course). It's not because of "commercial" trust but because of security, for both visiting members and yours truly.</p> <p>Functionally speaking, the Hana Code Insert Plugin doesn't protest running over SSL - it works perfectly fine. However, because of the calls to remote non-https assets (i.e. the WP Marketing / RSS icon within the widget) the browser protests, because of ye olde mixed content problem, as far as I can tell mostly due to the RSS widget of the plugin on the wp-admin main page. And calls to a https version of that same image fail, arguably because SSL isn't available (or simply blocked) on the WP Marketing site server.</p> <p>To be sure, this is the image that's giving me a bit of trouble:</p> <p><img src="http://wpmarketing.org/image/wpmarketing_rss.png" alt="The WP Marketing RSS icon" title="The WP Marketing RSS icon" /></p> <p>Of course it's trivial to solve it by downloading that image and putting it on the site, and then point to it with a webroot-relative pointer so as to switch to whichever protocol requires it, but I thought it'd be more polite to flag it here before hacking out something which may serve another purpose (e.g. metrics gathering, although I'm not sure if that's really useful in the main wp-admin settings page, all the more with the toggle to hide/show the widget there).</p> <p>So, I wonder if it's possible to address that either by serving such remote content on request via https, or drop the static assets in the plugin folder and pull them from there (with a sensible function i.e. to pick the right protocol) so as to avoid this little but pesky problem... </p> <p>Thanks in advance for looking into it (and helping to make the internet a better place!) </p> http://wpmarketing.org/forum/topic/videos-are-not-displaying-soruce-amazon-s3#post-106 Wed, 20 Jan 2010 10:51:02 +0000 Babar 106@http://wpmarketing.org/forum/ <p>Plugin version : Hana Flv Player V2.4.2</p> <p>Here is the URL where i'm using your sample code for displaying the video: <a href="http://becominghmc.com/?p=1" rel="nofollow">http://becominghmc.com/?p=1</a></p> <p>Here is the code which i'm using in the post :</p> <p>[hana-flv-player<br /> video="https://becoming.s3.amazonaws.com/teaser.flv"<br /> width="400"<br /> height="320"<br /> description="Sarah is having fun in a merry-go-round"<br /> clickurl="http://becominghmc.com"<br /> clicktarget="_blank"<br /> player="1"<br /> autoplay="false"<br /> loop="false"<br /> autorewind="true"<br /> /]</p> <p>I tried all the players but none of them are working at the moment?<br /> I also tried in side bar and used following code:</p> <p>&lt;?php<br /> if (function_exists('hana_flv_player_template_call')){<br /> $hana_arg="<br /> video='https://becoming.s3.amazonaws.com/teaser.flv'<br /> player='2'<br /> width='180'<br /> height='150'<br /> more_2=\"showStopButton: false, showScrubber: false, showVolumeSlider: false,showMuteVolumeButton: false,<br /> showFullScreenButton: false, showMenu: false, controlsOverVideo: 'locked',controlBarBackgroundColor: -1,<br /> controlBarGloss: 'none', usePlayOverlay:false \"<br /> ";<br /> echo hana_flv_player_template_call($hana_arg);<br /> }<br /> ?&gt; </p>