[3.1] Fehler bei Umstellung von http zu https

CPU76 · Beitrag von **CPU76** » 11.03.2017 12:23

Hey,

Nach der Umstellung von http zu https läuft eigentlich alles richtig. Nur bei der Anmeldung und Abmeldung erscheint eine Fehlermeldung.

Fehlermeldung beim Anmelden:
Allgemeiner Fehler
Es wurde versucht, zu einer möglicherweise unsicheren URL weiterzuleiten.

Fehlermeldung beim Abmelden:
Allgemeiner Fehler
Es wurde versucht, zu einer möglicherweise unsicheren URL weiterzuleiten.

BACKTRACE

FILE: (not given by php)
LINE: (not given by php)
CALL: msg_handler()

FILE: [ROOT]/includes/functions.php
LINE: 2362
CALL: trigger_error()

FILE: [ROOT]/ucp.php
LINE: 113
CALL: redirect()

Ich denke, dass man die htaccess datei anpassen muss, weis jedoch nicht genau wie. Kann mir jemand helfen?
Hier meine htaccess:

Code: Alles auswählen

<Files config.php>
Deny from all
</Files>

RewriteCond %{HTTP_HOST} ^www\.(.*)$ [NC]
RewriteRule ^(.*)$ http://%1/$1 [R=301,L]

RewriteCond %{HTTP_HOST} ^chatadd\.net$ [OR]
RewriteCond %{HTTP_HOST} ^www\.chatadd\.net$
RewriteRule ^index\.php$ "http\:\/\/chatadd\.net\/" [R=301,L]

<IfModule mod_rewrite.c>
	# You may need to un-comment the following lines
	# Options +FollowSymlinks
	# To make sure that rewritten dir or file (/|.html) will not load dir.php in case it exist
	# Options -MultiViews
	# REMEBER YOU ONLY NEED TO STARD MOD REWRITE ONCE
	RewriteEngine On

	# Uncomment the statement below if you want to make use of
	# HTTP authentication and it does not already work.
	# This could be required if you are for example using PHP via Apache CGI.
	# RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]

	# REWRITE BASE
	RewriteBase /

	# HERE IS A GOOD PLACE TO FORCE CANONICAL DOMAIN
	# Define fully qualified ssl aware protocol
	# RewriteCond %{SERVER_PORT}s ^(443(s)|[0-9]+s)$
	# RewriteRule ^.*$ - [env=HttpFullProto:http%2://]
	# RewriteCond %{HTTP_HOST} !^chatadd\.net$ [NC]
	# RewriteRule ^(.*)$ %{ENV:HttpFullProto}chatadd.net/$1 [QSA,L,R=301]

	# DO NOT GO FURTHER IF THE REQUESTED FILE / DIR DOES EXISTS
	RewriteCond %{REQUEST_FILENAME} -f [OR]
	RewriteCond %{REQUEST_FILENAME} -d
	RewriteRule . - [L]
	# FORUM INDEX REWRITERULE WOULD STAND HERE IF USED. "forum" REQUIRES TO BE SET AS FORUM INDEX
	# RewriteRule ^forum\.html$ /index.php [QSA,L,NC]
	# FORUM ALL MODES
	RewriteRule ^(forum|[a-z0-9_-]*-f)([0-9]+)(-([0-9]+))?\.html$ /viewforum.php?f=$2&start=$4 [QSA,L,NC]
	# TOPIC WITH VIRTUAL FOLDER ALL MODES
	RewriteRule ^(forum|[a-z0-9_-]*-f)([0-9]+)/(topic|[a-z0-9_-]*-t)([0-9]+)(-([0-9]+))?\.html$ /viewtopic.php?f=$2&t=$4&start=$6 [QSA,L,NC]
	# TOPIC WITHOUT FORUM ID & DELIM ALL MODES
	RewriteRule ^([a-z0-9_-]*)/?(topic|[a-z0-9_-]*-t)([0-9]+)(-([0-9]+))?\.html$ /viewtopic.php?forum_uri=$1&t=$3&start=$5 [QSA,L,NC]
	# PROFILES ALL MODES WITH ID
	RewriteRule ^(member|[a-z0-9_-]*-u)([0-9]+)\.html$ /memberlist.php?mode=viewprofile&u=$2 [QSA,L,NC]
	# USER MESSAGES ALL MODES WITH ID
	RewriteRule ^(member|[a-z0-9_-]*-u)([0-9]+)-(topics|posts)(-([0-9]+))?\.html$ /search.php?author_id=$2&sr=$3&start=$5 [QSA,L,NC]
	# GROUPS ALL MODES
	RewriteRule ^(group|[a-z0-9_-]*-g)([0-9]+)(-([0-9]+))?\.html$ /memberlist.php?mode=group&g=$2&start=$4 [QSA,L,NC]
	# POSTS
	RewriteRule ^post([0-9]+)\.html$ /viewtopic.php?p=$1 [QSA,L,NC]
	# ACTIVE TOPICS
	RewriteRule ^active-topics(-([0-9]+))?\.html$ /search.php?search_id=active_topics&start=$2&sr=topics [QSA,L,NC]
	# UNANSWERED TOPICS
	RewriteRule ^unanswered(-([0-9]+))?\.html$ /search.php?search_id=unanswered&start=$2&sr=topics [QSA,L,NC]
	# NEW POSTS
	RewriteRule ^newposts(-([0-9]+))?\.html$ /search.php?search_id=newposts&start=$2&sr=topics [QSA,L,NC]
	# UNREAD POSTS
	RewriteRule ^unreadposts(-([0-9]+))?\.html$ /search.php?search_id=unreadposts&start=$2 [QSA,L,NC]
	# THE TEAM
	RewriteRule ^the-team\.html$ /memberlist.php?mode=team [QSA,L,NC]
	# HERE IS A GOOD PLACE TO ADD OTHER PHPBB RELATED REWRITERULES
	
	# FORUM WITHOUT ID & DELIM ALL MODES
	# THESE LINES MUST BE LOCATED AT THE END OF YOUR HTACCESS TO WORK PROPERLY
	RewriteCond %{REQUEST_FILENAME} !-f
	RewriteRule ^([a-z0-9_-]+?)(-([0-9]+))?\.html$ /viewforum.php?forum_uri=$1&start=$3 [QSA,L,NC]
	# FIX RELATIVE PATHS : FILES
	RewriteRule ^(style\.php|ucp\.php|mcp\.php|faq\.php|posting\.php|download/file\.php|report\.php|adm/index\.php|cron\.php)$ /$1 [QSA,L,NC,R=301]
	# FIX RELATIVE PATHS : IMAGES
	RewriteRule ^(styles/.*|images/.*|assets/.*|ext/.*)$ /$1 [QSA,L,NC,R=301]
	#
	# The following 3 lines will rewrite URLs passed through the front controller
	# to not require app.php in the actual URL. In other words, a controller is
	# by default accessed at /app.php/my/controller, but can also be accessed at
	# /my/controller
	#
	RewriteCond %{REQUEST_FILENAME} !-f
	RewriteCond %{REQUEST_FILENAME} !-d
	RewriteRule ^(.*)$ /app.php [QSA,L]

</IfModule>

# With Apache 2.4 the "Order, Deny" syntax has been deprecated and moved from
# module mod_authz_host to a new module called mod_access_compat (which may be
# disabled) and a new "Require" syntax has been introduced to mod_authz_host.
# We could just conditionally provide both versions, but unfortunately Apache
# does not explicitly tell us its version if the module mod_version is not
# available. In this case, we check for the availability of module
# mod_authz_core (which should be on 2.4 or higher only) as a best guess.
<IfModule mod_version.c>
	<IfVersion < 2.4>
		<Files "config.php">
			Order Allow,Deny
			Deny from All
		</Files>
		<Files "common.php">
			Order Allow,Deny
			Deny from All
		</Files>
	</IfVersion>
	<IfVersion >= 2.4>
		<Files "config.php">
			Require all denied
		</Files>
		<Files "common.php">
			Require all denied
		</Files>
	</IfVersion>
</IfModule>
<IfModule !mod_version.c>
	<IfModule !mod_authz_core.c>
		<Files "config.php">
			Order Allow,Deny
			Deny from All
		</Files>
		<Files "common.php">
			Order Allow,Deny
			Deny from All
		</Files>
	</IfModule>
	<IfModule mod_authz_core.c>
		<Files "config.php">
			Require all denied
		</Files>
		<Files "common.php">
			Require all denied
		</Files>
	</IfModule>
</IfModule>

Danke für eure Hilfe
CPU76

Beitrag von **vfrblue** » 11.03.2017 12:37

Schau mal hier: viewtopic.php?f=145&t=239197&p=1365186#p1365186

Und das "RewriteBase /"
ändern in : "RewriteBase /"Dein_Forums_Link""

CPU76 · Beitrag von **CPU76** » 11.03.2017 12:45

Hey,
danke für die schnelle Antwort.

Danach müsste ich den folgenden code oben in die htaccess einfügen?

Code: Alles auswählen

<IfModule mod_rewrite.c>

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]

Mir scheint es, dass ich aber in meiner htaccess datei MINDESTENS noch hier etwas ändern müsste:

Code: Alles auswählen

RewriteCond %{HTTP_HOST} ^www\.(.*)$ [NC]
RewriteRule ^(.*)$ http://%1/$1 [R=301,L]

RewriteCond %{HTTP_HOST} ^chatadd\.net$ [OR]
RewriteCond %{HTTP_HOST} ^www\.chatadd\.net$
RewriteRule ^index\.php$ "http\:\/\/chatadd\.net\/" [R=301,L]

Danke
CPU76

Beitrag von **Crizzo** » 11.03.2017 12:47

CPU76 hat geschrieben:
Mir scheint es, dass ich aber in meiner htaccess datei MINDESTENS noch hier etwas ändern müsste:
Code: Alles auswählen
RewriteCond %{HTTP_HOST} ^www\.(.*)$ [NC]
RewriteRule ^(.*)$ http://%1/$1 [R=301,L]

RewriteCond %{HTTP_HOST} ^chatadd\.net$ [OR]
RewriteCond %{HTTP_HOST} ^www\.chatadd\.net$
RewriteRule ^index\.php$ "http\:\/\/chatadd\.net\/" [R=301,L]
Danke
CPU76

Schmeiß mal die 5 Zeilen raus und pack mal diese an die gleiche Stelle:

Code: Alles auswählen

RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L]
RewriteCond %{HTTP_HOST} !^www\.
RewriteRule ^(.*)$ https://www.%{HTTP_HOST}/$1 [R=301,L]

Beitrag von **vfrblue** » 11.03.2017 12:52

Ich würde das so ändern:

Code: Alles auswählen

RewriteCond %{HTTP_HOST} ^www\.(.*)$ [NC]
#RewriteRule ^(.*)$ http://%1/$1 [R=301,L]

RewriteCond %{HTTP_HOST} ^chatadd\.net$ [OR]
RewriteCond %{HTTP_HOST} ^www\.chatadd\.net$
RewriteRule ^index\.php$ "https\:\/\/chatadd\.net\/" [R=301,L]

Da war einer schneller ..

CPU76 · Beitrag von **CPU76** » 11.03.2017 13:01

Hey,
danke für die Antworten, habe die Änderungen gemacht. Mit der REWRITE BASE Änderung bin ich noch nicht sicher. Was muss ich hier ändern?

Code: Alles auswählen

# REWRITE BASE
	RewriteBase /

	# HERE IS A GOOD PLACE TO FORCE CANONICAL DOMAIN
	# Define fully qualified ssl aware protocol
	# RewriteCond %{SERVER_PORT}s ^(443(s)|[0-9]+s)$
	# RewriteRule ^.*$ - [env=HttpFullProto:http%2://]
	# RewriteCond %{HTTP_HOST} !^chatadd\.net$ [NC]
	# RewriteRule ^(.*)$ %{ENV:HttpFullProto}chatadd.net/$1 [QSA,L,R=301]

Danke
CPU76

Beitrag von **Crizzo** » 11.03.2017 13:02

Ich würde sagen RewriteBase / ist i.O.

CPU76 · Beitrag von **CPU76** » 11.03.2017 13:10

Hey,

Ich werde die Änderungen mal hochladen und gebe dann feedback.

Danke euch
CPU76

Beitrag von **Crizzo** » 11.03.2017 13:12

Bedenke bitte, dass solche Umleitungen in der .htaccess auch vom Browser-Cache erfasst werden. Von daher ist der Inkognito-Modus eine gute Methode, um dies zu testen.

CPU76 · Beitrag von **CPU76** » 11.03.2017 13:21

Hey,

hmmmm, leider kann ich jetzt nicht mehr auf chatadd zugreifen, es erscheint die Fehlermeldung:
Diese Verbindung ist nicht sicher
Der Inhaber von http://www.chatadd.net hat die Website nicht richtig konfiguriert. Firefox hat keine Verbindung mit dieser Website aufgebaut, um Ihre Informationen vor Diebstahl zu schützen.

Hier nochmals meine htaccess Datei:

Code: Alles auswählen

<IfModule mod_rewrite.c>

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]

<IfModule mod_rewrite.c>
	# You may need to un-comment the following lines
	# Options +FollowSymlinks
	# To make sure that rewritten dir or file (/|.html) will not load dir.php in case it exist
	# Options -MultiViews
	# REMEBER YOU ONLY NEED TO STARD MOD REWRITE ONCE
	RewriteEngine On

	# Uncomment the statement below if you want to make use of
	# HTTP authentication and it does not already work.
	# This could be required if you are for example using PHP via Apache CGI.
	# RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]

	# REWRITE BASE
	RewriteBase /

	# HERE IS A GOOD PLACE TO FORCE CANONICAL DOMAIN
	# Define fully qualified ssl aware protocol
	# RewriteCond %{SERVER_PORT}s ^(443(s)|[0-9]+s)$
	# RewriteRule ^.*$ - [env=HttpFullProto:http%2://]
	# RewriteCond %{HTTP_HOST} !^chatadd\.net$ [NC]
	# RewriteRule ^(.*)$ %{ENV:HttpFullProto}chatadd.net/$1 [QSA,L,R=301]

	# DO NOT GO FURTHER IF THE REQUESTED FILE / DIR DOES EXISTS
	RewriteCond %{REQUEST_FILENAME} -f [OR]
	RewriteCond %{REQUEST_FILENAME} -d
	RewriteRule . - [L]
	# FORUM INDEX REWRITERULE WOULD STAND HERE IF USED. "forum" REQUIRES TO BE SET AS FORUM INDEX
	# RewriteRule ^forum\.html$ /index.php [QSA,L,NC]
	# FORUM ALL MODES
	RewriteRule ^(forum|[a-z0-9_-]*-f)([0-9]+)(-([0-9]+))?\.html$ /viewforum.php?f=$2&start=$4 [QSA,L,NC]
	# TOPIC WITH VIRTUAL FOLDER ALL MODES
	RewriteRule ^(forum|[a-z0-9_-]*-f)([0-9]+)/(topic|[a-z0-9_-]*-t)([0-9]+)(-([0-9]+))?\.html$ /viewtopic.php?f=$2&t=$4&start=$6 [QSA,L,NC]
	# TOPIC WITHOUT FORUM ID & DELIM ALL MODES
	RewriteRule ^([a-z0-9_-]*)/?(topic|[a-z0-9_-]*-t)([0-9]+)(-([0-9]+))?\.html$ /viewtopic.php?forum_uri=$1&t=$3&start=$5 [QSA,L,NC]
	# PROFILES ALL MODES WITH ID
	RewriteRule ^(member|[a-z0-9_-]*-u)([0-9]+)\.html$ /memberlist.php?mode=viewprofile&u=$2 [QSA,L,NC]
	# USER MESSAGES ALL MODES WITH ID
	RewriteRule ^(member|[a-z0-9_-]*-u)([0-9]+)-(topics|posts)(-([0-9]+))?\.html$ /search.php?author_id=$2&sr=$3&start=$5 [QSA,L,NC]
	# GROUPS ALL MODES
	RewriteRule ^(group|[a-z0-9_-]*-g)([0-9]+)(-([0-9]+))?\.html$ /memberlist.php?mode=group&g=$2&start=$4 [QSA,L,NC]
	# POSTS
	RewriteRule ^post([0-9]+)\.html$ /viewtopic.php?p=$1 [QSA,L,NC]
	# ACTIVE TOPICS
	RewriteRule ^active-topics(-([0-9]+))?\.html$ /search.php?search_id=active_topics&start=$2&sr=topics [QSA,L,NC]
	# UNANSWERED TOPICS
	RewriteRule ^unanswered(-([0-9]+))?\.html$ /search.php?search_id=unanswered&start=$2&sr=topics [QSA,L,NC]
	# NEW POSTS
	RewriteRule ^newposts(-([0-9]+))?\.html$ /search.php?search_id=newposts&start=$2&sr=topics [QSA,L,NC]
	# UNREAD POSTS
	RewriteRule ^unreadposts(-([0-9]+))?\.html$ /search.php?search_id=unreadposts&start=$2 [QSA,L,NC]
	# THE TEAM
	RewriteRule ^the-team\.html$ /memberlist.php?mode=team [QSA,L,NC]
	# HERE IS A GOOD PLACE TO ADD OTHER PHPBB RELATED REWRITERULES
	
	# FORUM WITHOUT ID & DELIM ALL MODES
	# THESE LINES MUST BE LOCATED AT THE END OF YOUR HTACCESS TO WORK PROPERLY
	RewriteCond %{REQUEST_FILENAME} !-f
	RewriteRule ^([a-z0-9_-]+?)(-([0-9]+))?\.html$ /viewforum.php?forum_uri=$1&start=$3 [QSA,L,NC]
	# FIX RELATIVE PATHS : FILES
	RewriteRule ^(style\.php|ucp\.php|mcp\.php|faq\.php|posting\.php|download/file\.php|report\.php|adm/index\.php|cron\.php)$ /$1 [QSA,L,NC,R=301]
	# FIX RELATIVE PATHS : IMAGES
	RewriteRule ^(styles/.*|images/.*|assets/.*|ext/.*)$ /$1 [QSA,L,NC,R=301]
	#
	# The following 3 lines will rewrite URLs passed through the front controller
	# to not require app.php in the actual URL. In other words, a controller is
	# by default accessed at /app.php/my/controller, but can also be accessed at
	# /my/controller
	#
	RewriteCond %{REQUEST_FILENAME} !-f
	RewriteCond %{REQUEST_FILENAME} !-d
	RewriteRule ^(.*)$ /app.php [QSA,L]

</IfModule>

# With Apache 2.4 the "Order, Deny" syntax has been deprecated and moved from
# module mod_authz_host to a new module called mod_access_compat (which may be
# disabled) and a new "Require" syntax has been introduced to mod_authz_host.
# We could just conditionally provide both versions, but unfortunately Apache
# does not explicitly tell us its version if the module mod_version is not
# available. In this case, we check for the availability of module
# mod_authz_core (which should be on 2.4 or higher only) as a best guess.
<IfModule mod_version.c>
	<IfVersion < 2.4>
		<Files "config.php">
			Order Allow,Deny
			Deny from All
		</Files>
		<Files "common.php">
			Order Allow,Deny
			Deny from All
		</Files>
	</IfVersion>
	<IfVersion >= 2.4>
		<Files "config.php">
			Require all denied
		</Files>
		<Files "common.php">
			Require all denied
		</Files>
	</IfVersion>
</IfModule>
<IfModule !mod_version.c>
	<IfModule !mod_authz_core.c>
		<Files "config.php">
			Order Allow,Deny
			Deny from All
		</Files>
		<Files "common.php">
			Order Allow,Deny
			Deny from All
		</Files>
	</IfModule>
	<IfModule mod_authz_core.c>
		<Files "config.php">
			Require all denied
		</Files>
		<Files "common.php">
			Require all denied
		</Files>
	</IfModule>
</IfModule>

<Files config.php>
Deny from all
</Files>

RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L]
RewriteCond %{HTTP_HOST} !^www\.
RewriteRule ^(.*)$ https://www.%{HTTP_HOST}/$1 [R=301,L]

CPU76

phpBB.de

[3.1] Fehler bei Umstellung von http zu https

[3.1] Fehler bei Umstellung von http zu https

Re: [3.1] Fehler bei Umstellung von http zu https

Re: [3.1] Fehler bei Umstellung von http zu https

Re: [3.1] Fehler bei Umstellung von http zu https

Re: [3.1] Fehler bei Umstellung von http zu https

Re: [3.1] Fehler bei Umstellung von http zu https

Re: [3.1] Fehler bei Umstellung von http zu https

Re: [3.1] Fehler bei Umstellung von http zu https

Re: [3.1] Fehler bei Umstellung von http zu https

Re: [3.1] Fehler bei Umstellung von http zu https