I know I fixed it last time, and I do care because it'll be an issue for me too, but I won't have access to an HTTPS server with 1.9.2 on it until November, so I'm going to assign this back to the default in case some-one else can fix it quicker than me. Unfortunately without an HTTPS server to test on, I'd be shooting in the dark.

Red Hat Linux Enterprise 5
Apache 2.2.3
PHP 5.1.6
MySQL 5.0.45

We currently use the standard - "formal_white" theme that is bundled with Moodle. There is no custom code running on this server. As for themes, this issue is occurring regardless of the theme applied.

Is there any way to obtain the modifications Jenny Gray made to correct this issue the first time. It's is an exact duplicate of the previous issue. I would apply 1.9.3 if it corrects the issue, but this is a production server.

Thanks in advance.

Moodle 1.9.2 (Build 20080711) - All Standard
SuSe Linux Enterprise Server 10
Apache 2.2.3
PHP 5.2.5
MySQL 5.0.26

Thanks.

Blake, Maikon, you've given your server setups, but it might help if you give your client setup, as that's where the problem is occuring.

The code I put in is still there, so this is a similar problem in a different area. I'm sure the same approach can be used to fix it, but you need to track down what is being rendered onto the page in HTTP rather than HTTPS first.

To do that you'll need a different browser, like Firefox. Load the profile page and when it says something like "include unsecure items", say NO and try to work out what's missing. Or view the HTML and go through it with a fine toothcomb looking for HTTP not HTTPS (but not in any <a href""> because a HTTP link won't be the cause, it'll be an image or a javascript/CSS etc embedded file.

I believe the bug was introduced in 1.970.2.98 version of lib/weblib.php, see http://cvs.moodle.org/moodle/lib/weblib.php?r1=1.970.2.97&r2=1.970.2.98&pathrev=MOODLE_19_STABLE
The src of the picture is worked out using the get_file_url() function that does not take into account the carefully set-up $wwwroot a few lines above – setting up $wwwroot is $HTTPSPAGEREQUIRED aware but that has no effect in get_file_url().

Index: filelib.php
===================================================================
RCS file: /cvsroot/moodle/moodle/lib/filelib.php,v
retrieving revision 1.50.2.19
diff -u -r1.50.2.19 filelib.php
— filelib.php 11 Jul 2008 02:28:32 -0000 1.50.2.19
+++ filelib.php 12 Aug 2008 04:01:14 -0000
@@ -19,6 +19,9 @@
case 'user':
$url = $CFG->wwwroot."/user/pix.php";
break;
+ case 'httpsuser': // USQ MOOD-1890
+ $url = $CFG->httpswwwroot."/user/pix.php";
+ break;
case 'usergroup':
$url = $CFG->wwwroot."/user/pixgroup.php";
break;
Index: weblib.php
===================================================================
RCS file: /cvsroot/moodle/moodle/lib/weblib.php,v
retrieving revision 1.970.2.101
diff -u -r1.970.2.101 weblib.php
— weblib.php 22 Jul 2008 14:06:48 -0000 1.970.2.101
+++ weblib.php 12 Aug 2008 04:00:53 -0000
@@ -4398,8 +4412,10 @@
$class = "userpicture";
if (!empty($HTTPSPAGEREQUIRED)) { $wwwroot = $CFG->httpswwwroot; + $pictype = 'httpsuser'; // USQ MOOD-1890 } else { $wwwroot = $CFG->wwwroot; + $pictype = 'user'; // USQ MOOD-1890 }

if (is_null($picture)) {
@@ -4408,7 +4424,7 @@

if ($picture) { // Print custom user picture require_once($CFG->libdir.'/filelib.php'); - $src = get_file_url($user->id.'/'.$file.'.jpg', null, 'user'); + $src = get_file_url($user->id.'/'.$file.'.jpg', null, $pictype); // USQ MOOD-1890 } else { // Print default user pictures (use theme version if available)
$class .= " defaultuserpic";
$src = "$CFG->pixpath/u/$file.png";

http://tracker.moodle.org/browse/MDL-15800?focusedCommentId=54278#action_54278

The solution suggested by this forum participant works

http://moodle.org/mod/forum/discuss.php?d=106233

http://moodle/mod/quiz/quiz.js

We changed this line in moodle/lib/ajax/ajaxlib.php:

$testpath = str_replace($wwwroot, $CFG->dirroot, $libpath);

to

$testpath = str_replace($CFG->wwwroot, $CFG->dirroot, $libpath);

it fixed it.

Thanks,

Andrea

Is the same problem that you have?
Is someone else having a problem on this page?

I can reproduce the problem by going to the Edit Profile link with IE7. As the page is loading, it displays the warning dialog that says "This page contains both secure and nonsecure items." Clicking either Yes or No will allow the page to load, but the text field for the Description box is unusable (no text is visible in it and you cannot type in it).

When clicking No on the dialog, the standard IE "Navigation to the page has been canceled" message is displayed in half of the text box which leads me to believe that this issue is directly related to the display of that field somehow.

Thanks!

I'll have a look today where it comes from, thanks.

Thanks

https://

I'm trying to track down the code that generates it to make a fix, but I daresay others would find it quicker than me.

Mark, can you confirm that you still or not have the bug on the last CVS or 1.9.5+ ?
Can anyone reproducing the bug confirm using the last CVS or 1.9.5+?