Using SSL brings warning of mixed content

[HonkXL]

I set up Zoph to run on a plain SSL-environment. Option to use SSL only in settings is active.
Firefox brings up warning about mixed content and maps are not working.

I found out that the problem is these line:

`

<script type="text/javascript" src="http://tile.cloudmade.com/wml/0.2/web-maps-lite.js"></script>

`

I think all JavaScripts that are refered to should be using https to prevent this error.

[jeroenrnl]

Which mapping service are you using? I have just been testing and found out that Yahoo and Cloudmade stopped their API service and Openlayers is buggy.

Your issue might be caused by mixed SSL content, but it might also be the above (especially since the only service that is working correctly - Google Maps - is already using https.

This should all be solved with issue #68, where Mapstraction will be replaced by Leaflet. Unfortunately, @JiCiT, who is working on that, currently has little time to spend on Zoph.

Could you confirm whether or not it is working correctly if you use Google Maps?

[HonkXL]

I used Openlayers. When I switch to Google Maps and click to "places" I got this error message in my browser:

Fehler: Umleitungsfehler
Die aufgerufene Website leitet die Anfrage so um, dass sie nie beendet werden kann.
Dieses Problem kann manchmal auftreten, wenn Cookies deaktiviert oder abgelehnt werden.

English translation: Redirection error. The calling webpage redirects the request in a way that it will never end. This problem can sometimes happen when Cookies are inactive or refused.

[jeroenrnl]

Could you try this again but with

define('LOG_SEVERITY', log::DEBUG);
define('LOG_SUBJECT', log::REDIRECT);

in config.inc.php
and then let me know where it is redirecting to?

[jeroenrnl]

By the way, on my system this does not occur. (with https set to "always")

[jeroenrnl]

I have been thinking, by the way to completely remove these settings from Zoph as with the current state of technology, it is perfectly possible to serve all photos over https. I added the "logon only" variant when it was undoable to let a simple home-server serve >4 MB photos over https.
Also, I added the "redirect to other URL" to overcome the issue that you could only serve 1 https-site per IP. I had a separate url "photo.myserver.net" that would redirect to "secure.myserver.net/photo" and this feature was added to facilitate that. With today's technology, this is no longer necessary.

[HonkXL]

I changed th config.inc.php and now I get this when I try to open places:
"Access denied" -> the link on this text and the address bar shows to places.php
Source code of the page:
<a href='places.php'>Access denied</a>

[jeroenrnl]

Could you check if the commit above fixes this?
Tip: you can download it as a patch here: https://github.com/jeroenrnl/zoph/commit/40a5891c224e3359886feb5c7a45163f0f7a69ae.patch

[jeroenrnl]

@HonkXL Could you let me know if the patch above fixes the issue?

[HonkXL]

@jeroenrnl - Sorry for my late answer. Now I tested it. After applying your patch, I can access the Map and using Google maps there is no message about mixed content. Great :-)
Do you want me to test this with other map-providers?

[jeroenrnl]

@HonkXL Thanks for getting back. It has no point trying Yahoo or Cloudmade - they stopped providing their services to the public. When I tried OpenLayers on my system I noticed that the markers were placed on the wrong place on the map - this was in a non-SSL setup, so it's unrelated to the issue you reported. The problem probably lies in in outdated implementation of the OpenLayers API. Unfortunately, the implementation Zoph is using, Mapstraction, has not received any updates for the past 3 years or so. There is work in progress to move Zoph to another "Mapping Abstraction library": Leaflet. I hope to have that ready in v0.9.5, which is planned come out near the end of this year. Until then (or a little bit earlier if you're brave enough to run some in-development software), Google Maps is the only working option.

[jeroenrnl]

@HonkXL By the way, the problem you ran into that caused a redirection loop, was unrelated to the mapping implementation - it was caused by some changes in v0.9.3, where I had overlooked to always give an admin user "viewing" rights on places.

[jeroenrnl]

This is merged into development now: 86b9b86