Fork me on GitHub

ImpressCMS, SSL and Cloudflare Free

I setup my ImpressCMS site using a Let's Encrypt SSL certificate. Everything works fine, nothing specific to configure other than putting 'https' in your root url. The site was running a bit sluggish, due to the server being on the other end of the world, so I decided to activate the free Cloudflare option my hosting company offered.

After that, once Cloudflare was up and running, my site was unreachable due to 'the site redirecting in an incorrect way'. Because the site has been working without issue before, I figured it was the cloudflare setup that needed adapting.

I found this article on the cloudflare support site that explains what was happening : my site was SSL-only, but the cloudflare default setting is for 'Flexible SSL'. The Flexible SSL option acts as a SSL proxy between your users and your site, and can be a good option if you don't have the opportunity to run your site with an SSL certificate, but you want to expose an SSL address to the world. Cloudflare then exposes a HTTPS address to the outside world, but communicates with your servers without it.

Changing the option from 'Flexible SSL' to 'Full SSL' immediately fixed the issue for me. Site response times have improved considerably since then.

Topic


Re: login to custom php app using icms login credential ?

As a follow-up on this, you could implement this using a OAuth2 server, where the OAuth2 server lets the user login in your ImpressCMS site, and then notify your other webapp that the user is verified. That means custom development on both sides, and i don't think that this has been attempted before for an ImpressCMS site. 

This would be the most flexible solution, in the likes of logging in with Twitter, Google, Microsoft or Facebook into a site.

Topic


Re: login to custom php app using icms login credential ?

I totally agree with @skenow. This way you don't need to duplicate the login procedure in ImpressCMS, and you can still use the existing userbase.

 



Re: login to custom php app using icms login credential ?

So - you want to have your login be the login from your ImpressCMS site, with all their users and passwords, and the rest of the content be restricted, but not an icms site?

Then, each of your pages must check for a valid user, like your ICMS site does (icms::$user is set and meets your criteria).

To access this information, the easiest way I see is to require mainfile.php in all your pages, which will give you a connection to the db that holds the users and the salt key stored in the trust path to complete the authorization.

Steve Twitter: @skenow Facebook: Steve Kenow



login to custom php app using icms login credential ?

Hi

i would like to build a custom php application without using icms but i would like to use icms user/password from 
user table to login to my system 

is there any code script out there that i can use



Re: What are the parts of ImpressCMS that you can't live without?


In Impresscms everything is good, and needed I think.

But (and no critisism) there is this intrigueing Q about modules and page (blanks OR module-page) implementation.

page(empty or module)  -  block positions  -  theme-data - template manager - module(install area)
  //   many possible alternatives both for physical and visual connection.

... and where those should best be placed in admin area? For me as user (as publisher) this is much a topic wich make the site a mystery or comprehenceble.


This could perhaps be in a new thread.

 



Re: Reputation and impresscms traits

I only had access to the old DHTML editor, now I have the WYSIWYG one and the problem has gone away, thanks.

Is this Tiny MCE?



Re: Reputation and impresscms traits

Possibly - which editor did you see up until now (I just changed it for registered users)?

Steve Twitter: @skenow Facebook: Steve Kenow



Re: Reputation and impresscms traits

Testing Line Break Unchecked Not working for me. Maybe permissions are involved somehow?



Re: Reputation and impresscms traits

I uncheck the Enable line break whenever I post using the WYSIWYG editors and the line breaks work appropriately then.

Initial post of this reply has the option checked (enabled)

The post displayed properly for me and this section was added with the box unchecked.

Steve Twitter: @skenow Facebook: Steve Kenow



Re: time based custom blocks

No, at the moment there are no time-based blocks in the core. If you want to, you could do it with an auto task.



time based custom blocks

is this possible i want to show the block for certain period only



Re: Reputation and impresscms traits

There is a theme manager block that comes with the system module. If you look at how it works you could probably set the theme for any given page, I imagine it is just one line or variable.



Re: Reputation and impresscms traits

You think it is possible to code a "Theme manager" that is more adoptable to 2 or more page-themes? - - and some control-pointer in module-install module (or similar)? < - - .# - -> Is there any Bootstr. 3.3.7 (was it?) yet? <- - # - - > Being the most [easy cms/features] makes reputation // walked.



Re: Reputation and impresscms traits

No, I have the Enable line break checked.



Re: Reputation and impresscms traits

Do you uncheck the box below to Enable line break?

Steve Twitter: @skenow Facebook: Steve Kenow



Re: Reputation and impresscms traits

I noticed as well, and it is strange that you are having problems with line breaks and others (like me) don't. I see several possibilities : browser, os, user group. Or worse : a combination

I don't have the opportunity at the moment of testing this in the short term, so I appreciate any help on identifying the issue



Re: Reputation and impresscms traits

BTW re. my problem with linebreaks: If I preview the post, or edit it after submission, it looks fine (linebreaks are ok). So it seems that the linebreaks are being stored correctly in the database, but they are being removed when the post is actually *viewed*.



Re: What are the parts of ImpressCMS that you can't live without?

Re. security I suspect we there will see some major changes at Wordpress soon in the way their plugin system is managed, because it has become a security nightmare (check out the supply chain attacks described in the Wordfence blog). It is a good lesson for us also, if we move towards having a curated repository. Re. speed, I am wondering if a review of included files and libraries could help. Perhaps there are some things that could be consolidated, removed or made optional? Themes are another area where there are major speed boosts to be had. I have been playing with some really nice free Boostrap themes lately - and while they look great, they are *huge*. Mainly because of un-optimised artwork but also because of the sheer amount of Javascript libraries that are being bundled with them, some of which are old versions with security vulnerabilities of their own. Re. language, one idea may be to add language as a standard field on all content modules (eg. 2-letter ISO language codes). That would give us a $critieria to filter content by. I think there is a list of languages in the core IIRC.



Re: Reputation and impresscms traits

There was a draft of "Impressimizing a Theme" started a while ago - would be good to dust off and revisit.

Steve Twitter: @skenow Facebook: Steve Kenow




 Top


Recent Posts