Page 1 of 1
Facebook and Twitter Applications are not SSL Compatible.
PostPosted: 10 May 2015, 19:45
by Tripp
I noticed many people were having problems with either the Twitter or Facebook Applications and them not working.
I believe I've found out why they return a blank white page - because if you're trying to run them on an SSL site - like mine, they break SSL and thus get blocked by the browser. This is quite shocking really and I can't fathom as to why this wasn't seen or corrected earlier. I changed all HTTP links in the .php files to HTTPS and I can confirm mine now work. But to whom ever is developing these applications - this needs to be addressed immediately as it poses quite the security risk.
"//www.domain.tld" is all that's really required to maintain compatibility between SSL and non SSL sites. I implore whoever developed it to look into it.
Re: Facebook and Twitter Applications are not SSL Compatible.
PostPosted: 10 May 2015, 20:45
by Tripp
I've corrected both of these applications; whom do I submit it to for validation/verifying? I'd at least like to help, as my last message sounded rather snarky.
For SSL sites the applications I've modified will now work flawlessly - without breaking SSL. Which means anyone who found it wasn't working (and they're on SSL) should find that it will work now. Although I should also point out that Twitter disabled non-SSL requests to their API back in 2014 ... So this might be another issue. [SOURCE:
https://twittercommunity.com/t/restrict ... ffic/12331]
Re: Facebook and Twitter Applications are not SSL Compatible.
PostPosted: 11 May 2015, 17:03
by Jason
Thank you for letting us know, I'll take a look at it.
Re: Facebook and Twitter Applications are not SSL Compatible.
PostPosted: 11 May 2015, 17:21
by Tripp
The Facebook one should be an easy fix. The Twitter one will need a little more work to get it fixed on top of all the fixes the little images in the Twitter Display (for Avatars) will be in HTTP not in HTTPS too to.
I fixed this by Changing:
- Code: Select all
$followers_html = "";
$tweets_html = "";
foreach ($followers->users as $follower)
{
$followers_html .= '<a target="_blank" href="http://www.twitter.com/'.$follower->screen_name.'"><img width=24 height=24 src="'.str_replace('normal', 'mini', $follower->profile_image_url).'" alt="'.$follower->name.'" title="'.$follower->name.'"></a>';
}
To:
- Code: Select all
$followers_html = "";
$tweets_html = "";
$url_search = array('normal', 'http://');
$url_replace = array('mini', '//');
foreach ($followers->users as $follower)
{
$followers_html .= '<a target="_blank" href="//www.twitter.com/'.$follower->screen_name.'"><img width=24 height=24 src="'.str_replace($url_search, $url_replace, $follower->profile_image_url).'" alt="'.$follower->name.'" title="'.$follower->name.'"></a>';
}
My offer is still open if you'd like to see my full recommendations in a modified full application; which of course you can verify to make sure that they are the only changes I've made.
Re: Facebook and Twitter Applications are not SSL Compatible.
PostPosted: 16 Apr 2016, 22:03
by najatuw4646
Thanks for the info
ทีเด็ดบอล