|
|
| Line 1: |
Line 1: |
| When turning on https security for a site, embedded content using http urls may stop working. This 3rd party tool allows you to locate and upgrade those links by searching the content in the database and changing it in one go.
| | #REDIRECT [[HTTPS Search and replace]] |
| | |
| Note the warning at the top of the page, this will modify the contents of your database and so it is highly recommended that you take a full site backup first.
| |
| | |
| Like the [[Search and replace tool]] this is based on, this tool is only available if you know the correct url as it is only intended for those who know what they're doing. It can be found at http://yourmoodlesite.org/admin/tool/httpsreplace/index.php
| |
| | |
| Examples of mixed content are images, videos or audio files that are hosted on external sites and embedded to display within a Moodle page. Modern browsers will not allow content fetched via lower security http urls to be displayed on a page served over https and so the content will be blocked on secured Moodle sites.
| |
| | |
| This tool will search through the database for http urls being used in this manner. It will then attempt to visit those domains using https to figure out if it is supported. Domains that fail under https are listed for you to further investigate.
| |
| | |
| The two main reasons for being listed by the tool are:
| |
| | |
| a) the site does not support https
| |
| b) the site is temporarily or permanently unavailable via both http and https
| |
| | |
| We recommend scanning the list for domains under your own control first, and trying to upgrade those to support https links.
| |
| For third party content, you can either contact them to see if they intend to support secure https links, or you could try to find alternative sources for the linked content. (If the licence allows you could move the content to being hosted within Moodle.)
| |
| | |
| The tool will not change anything until you tick the box acknowledging that you understand the risk of directly changing your database
| |
| | |
| https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content
| |
| | |
| https://developer.mozilla.org/en-US/docs/Web/Security/Mixed_content/How_to_fix_website_with_mixed_content
| |
| | |
| https://developers.google.com/web/fundamentals/security/prevent-mixed-content/?hl=en
| |
