The entire site is secured with SSL. And all pages are correctly being served as https://. But, using IE 7 or 8 when navigating to
https://www.myglenbeigh.com/manager/ from any other secure page I get the "You are about to leave a secure Internet connection." When I click to continue it promptly tells me that I am ". . . about to view pages over a secure connection. Unfortunately, this is a problem for our users.
The setup . . . The SSL certificate is being served from a proxy server. All traffic is coming in on the MODx server via port 80 and we can’t change that. In order to make MODx work with the SSL cert (can’t do it in .htaccess because it uses port 80 and $_SERVER[’HTTPS’] doesn’t get set) I had to hard-code " $site_url = ’
https://www.myglenbeigh.com/’;" in config.inc.php (if there is a better way, please tell me).
I thought maybe that one of the plugins might be causing the message, but disabling them did not solve the problem. I also looked through the code a bit and couldn’t find anything that looked like it might be throwing me out of the secured area before opening the manager.
Can anybody help me? I’ve Googled and been through all the forum threads regarding https and SSL and unless I just didn’t understand something, I couldn’t find a solution. Thanks for any help you can provide.
MODx version 1.0.3
Version codename rev 6653
Database Version 5.0.51a-3ubuntu5.5
PHP Version PHP Version 5.2.4-2ubuntu5.10
Database Charset utf8
Database Collation Charset utf8_general_ci Table prefix modx_
MODX_BASE_PATH /var/www/vhosts/myglenbeigh.com/httpdocs/
MODX_BASE_URL / MODX_MANAGER_URL
https://www.myglenbeigh.com/manager/
MODX_MANAGER_PATH /var/www/vhosts/myglenbeigh.com/httpdocs/manager/
MODX_SITE_URL
https://www.myglenbeigh.com/
My .htaccess in httpdocs/manager:
[tt]# For unexpected logouts in multi-server/cloud environments see:
#
http://svn.modxcms.com/docs/display/MODx096/Friendly+URL+Solutions
#RewriteEngine Off
<IfModule mod_security.c>
# Turn the filtering engine Off
SecFilterEngine Off
</IfModule>
[/tt]
My .htaccess in httpdocs:
[tt]Options +FollowSymlinks
RewriteEngine On
RewriteBase /
# Fix Apache internal dummy connections from breaking [(site_url)] cache
RewriteCond %{HTTP_USER_AGENT} ^.*internal\ dummy\ connection.*$ [NC]
RewriteRule .* - [F,L]
RewriteCond %{HTTP_HOST} .
RewriteCond %{HTTP_HOST} !^www\.myglenbeigh\.com [NC]
RewriteRule ^(.*)$
https://www.myglenbeigh.com/$1 [R=301,L]
# For Friendly URLs
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^(.*)$ index.php?q=$1 [L,QSA]
# Reduce server overhead by enabling output compression if supported.
php_flag zlib.output_compression On
php_value zlib.output_compression_level 5
# Or, compress certain file types by extension:
<Files *.html>
SetOutputFilter DEFLATE
</Files>
# Or, compress certain file types by extension:
<Files *.js>
SetOutputFilter DEFLATE
</Files>
# Or, compress certain file types by extension:
<Files *.css>
SetOutputFilter DEFLATE
</Files>
<IfModule mod_expires.c>
ExpiresActive On
ExpiresDefault A300
ExpiresByType image/x-icon A2592000
ExpiresByType application/x-javascript A3600
ExpiresByType text/css A3600
ExpiresByType image/gif A604800
ExpiresByType image/png A604800
ExpiresByType image/jpeg A604800
ExpiresByType text/plain A300
ExpiresByType application/x-shockwave-flash A604800
ExpiresByType video/x-flv A604800
ExpiresByType application/pdf A604800
ExpiresByType text/html A300
</IfModule>
[/tt]
