DNN Forums

Ask questions about your website to get help learning DNN and help resolve issues.

How to fix http/https url generation inside module settings/edit modal window iframe?

 10 Replies
 4 Subscribed to this topic
 40 Subscribed to this forum
Sort:
Page 1 of 212 > >>
Author
Messages
New Around Here
Posts: 2
New Around Here

For some reason DNN generates url for src of iframe inside every modal for editing module or module settings with different protocol on localhost and prod. On localhost when page is opened via https, iframe also has https url. At the same time on prod when page is opened via https, DNN generates http url there for some reason. As result I'm experiancing this issue:

https://dnnsupport.dnnsof...sing-SSL-Offloading-

Disabling modals would be really stupid solution as I need editing and settings for DNN modules. So I used workaround with meta tag added to a website via PersonaBar.

That fix actually works, but firstly, it's not the most convenient solution. Secondly, it's a crutch. If localhost can generate https link, then it means that prod also can. But why it doesn't? It's a code that is generated by DNN, not by my code. So as result I don't understand right now what's going on about it and why.

P.S. Just in case to clearify what I'm talking about:

  • login as superuser to your website
  • click pencil button to edit page
  • hover over any DNN module
  • click pencil icon "Edit module" or gear icon "Settings" (doesn't matter)
  • that's the modal window with iframe I'm talking about
New Around Here
Posts: 10
New Around Here
Hi Constantine,
You can try to enable SSL in Security > More > SSL SETTINGS.
Best regards,
Linda

-
Website: https://www.dnngo.net
E-mail account: [email protected]
Skype: dnngo-linda
Growing Member
Posts: 55
Growing Member
Posted By dnngo-Linda on 20 Jun 2022 02:32 AM
Hi Constantine,
You can try to enable SSL in Security > More > SSL SETTINGS.


This does not fix the issue either, I'm not sure when it started but on a fresh instance of 9.10.2 there is no way to get the modal popups to load in https through DNN, short of placing an IIS rewrite rule for http to https for all requests

 

Veteran Member
Posts: 838
Veteran Member
3 Helpful Replier
Helpful Replier
Thanks for being such a helpful replier!
New Poster
New Poster
Congrats on posting!
How are the site settings? Because I had issues with canonical urls. If I set the aliasses as redirect, things were ok
New Around Here
Posts: 2
New Around Here

dnngo-Linda, for "IIS rewrite rule for http to https for all requests" to work I need browser to send request to server first. But browser refuses to send http request from https page at all. So it doesn't even get to server.

Growing Member
Posts: 27
Growing Member
I can only edit my DNN website if I login using HTTP.
The rich text module doesn't work under HTTPS.
Any idea why and what I could do to solve this?
I'm using and older version (7.x) but I'm really scared of upgrading. I had all kinds of problems the last time I did and have a ton of third-party modules that would probably not work on a newer installation.
Not really the best moment to invest on buying new modules that are going to become obsolete.. so bear with me.
I know upgrading would, perhaps, be the best solution but, is there an alternative?
Isn't DNN (even the older versions) supposed to natively work with HTTPS?
Thanks for any help or advice.
Ed
Senior Member
Posts: 1325
Senior Member
3 Helpful Replier
Helpful Replier
Thanks for being such a helpful replier!
Lifesaver
Lifesaver
You're Life Saver!
New Poster
New Poster
Congrats on posting!
3 Engaged Reader
Engaged Reader
You are an engaged reader!

Yes DNN is should work with HTTPS.
Did you press F12 (browser tools) and see if under network there are any issues (files not loading)?
It might be that if your https configuration is not correct, the editor urls are loaded with http and not https and blocked.

And then one of our obvious annoying upgrade notes.
Please upgrade. I know it can be very cumbersome especially with custom modules, but DNN 7 is so old that it not the question "if" but "when" your site is going to get hacked. You really need to get rid of the old telerik controls (by upgrading)....

Growing Member
Posts: 27
Growing Member

I have configured SSL on the server and on the Site settings page (as enabled not enforced) leaving all other options blank.

When I try to edit content in the HTML module the rich text editor appears but the window is totally empty both in the HTML view and the standard view and when I try to click on these selectors javascript(0)void appears in the bottom left hand side of the page. This only happens under HTTPS. Luckily it still works under HTTP.

As far as the upgrade goes... I looked at the suggested upgrade path and have started downloading the necessary files... it's going to be pretty tedious and nerve-wracking.. plus I'm going to have to stay up nights doing this.

Maybe I'm unlucky, or maybe I have too many third-party modules on my installation but I can't remember a single upgrade I didn't have a problem with.

I will have to do it, I agree. 

 

Growing Member
Posts: 27
Growing Member
Ok... I was wrong. Not that I have added HTTPS bindings for all DNN websites on my installation, the edit feature stopped working altogether, even under HTTP.
I'll try deactivating HTTPS on the website to see if it comes back. Not good...
Growing Member
Posts: 27
Growing Member
Ok... it has something to do with the CDN libraries. I had populated the two fields Telerik CDN basic and secure URL with my.favorite.cdn and the edit module stopped working both under HTTP and HTTPS.
I removed these settings and miraculously it started working on HTTP again.
Now I have to figure out why it doesn't work under HTTPS.
I'll try to activate SSL in Site settings - > Advanced -> SSL and see if that does the trick now that I fixed the problem I caused by trying to fix the original problem...

Page 1 of 212 > >>

These Forums are for the discussion of the open source CMS DNN platform and ecosystem.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. If you have (suspected) security issues, please DO NOT post them in the forums but instead follow the official DNN security policy
  2. No Advertising. This includes the promotion of commercial and non-commercial products or services which are not directly related to DNN.
  3. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  4. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  5. No Flaming or Trolling.
  6. No Profanity, Racism, or Prejudice.
  7. Site Moderators have the final word on approving / removing a thread or post or comment.
  8. English language posting only, please.

Would you like to help us?

Awesome! Simply post in the forums using the link below and we'll get you started.

Get Involved