Softaculous


Topic : VIRTUALIZOR admin panel - CONECTION NOT SECURE!!!


1

Posted By: indy0077 on January 7, 2018, 9:07 am
By accessing the admin panel via secure conection (https), there are HARD CODED LINKS which are causing https errors and warnings.


http://www.virtualizor.com/wiki/
http://www.virtualizor.com
http://www.softaculous.com

Please fix it immediately because it's a serious security hole.

Regards

Posted By: lesmond on January 7, 2018, 11:48 am | Post: 1
you must have gone to the wrong links

https://virtualizor.com/wiki/
https://virtualizor.com
https://softaculous.com

-----------------------
Buildz Hosting

Posted By: indy0077 on January 7, 2018, 12:01 pm | Post: 2
Quote From : lesmond January 7, 2018, 11:48 am


You don't understand what I'm meaning. I'm talking about the Virtualizor admin panel (GUI). There are this 3 links hardcoded with HTTP, so if you use a secure connection (https), the browser returns a warning about unsecure content on the admin page? Do you get me?



Posted By: lesmond on January 7, 2018, 12:51 pm | Post: 3
I see what you mean now, yes that needs to be changed, I had the same problem with webuzo, I had to change it manually, but it has been fix by the team now.

-----------------------
Buildz Hosting

Posted By: jevingala on January 9, 2018, 7:25 am | Post: 4
Hi,

Have you set any http link in Master/Slave settings on panel ?


-----------------------
Regards,
Virtualizor Team.
http://virtualizor.com/

Posted By: indy0077 on January 9, 2018, 7:42 am | Post: 5
Quote From : jevingala January 9, 2018, 7:25 am
Hi,

Have you set any http link in Master/Slave settings on panel ?



Don't understand your question. The 3 links have been hardcoded by your staff by creating the Virtualizor web template. Do you get me?

Posted By: indy0077 on January 9, 2018, 8:00 am | Post: 6
Here is a screenshot for your understanding:

Board Image

Posted By: Joshua2504 on January 9, 2018, 9:13 pm | Post: 7
Just force https everywhere, @Softaculous.

That's needed. You run websites with login and no TLS (e.g. the support system).

-----------------------
Joshua

TREUDLER - High-Performance KVM NVMe Virtual Servers in 10 locations world-wide

Posted By: indy0077 on January 10, 2018, 5:42 am | Post: 8
Quote From : Joshua2504 January 9, 2018, 9:13 pm
Just force https everywhere, @Softaculous.

That's needed. You run websites with login and no TLS (e.g. the support system).


Sorry??? Don't understand what do you mean.

Posted By: Joshua2504 on January 10, 2018, 11:57 am | Post: 9
Quote From : indy0077 January 10, 2018, 5:42 am
Quote From : Joshua2504 January 9, 2018, 9:13 pm
Just force https everywhere, @Softaculous.

That's needed. You run websites with login and no TLS (e.g. the support system).


Sorry??? Don't understand what do you mean.


It wasn't meant for you :)

-----------------------
Joshua

TREUDLER - High-Performance KVM NVMe Virtual Servers in 10 locations world-wide

Posted By: chirag on January 16, 2018, 11:07 am | Post: 10
Hi,

Sir we have changed this.
And it will be there in 2.9.5.1

Sorry for the inconvenience casued.
Let us know for further information.

-----------------------
Chirag Nagda
Software Developer
Softaculous Ltd

Posted By: indy0077 on January 16, 2018, 11:42 am | Post: 11
Quote From : chirag January 16, 2018, 11:07 am
Hi,

Sir we have changed this.
And it will be there in 2.9.5.1

Sorry for the inconvenience casued.
Let us know for further information.



Why do we have version 2.9.4? What is the current version?

Posted By: chirag on January 16, 2018, 1:53 pm | Post: 12
Hi,


Sir Current Stable verison is 2.9.4.8
Release version 2.9.5 (Which will be stable in couple of days)

Let us know for further information.

-----------------------
Chirag Nagda
Software Developer
Softaculous Ltd

Posted By: indy0077 on January 16, 2018, 2:11 pm | Post: 13
Quote From : chirag January 16, 2018, 1:53 pm
Hi,


Sir Current Stable verison is 2.9.4.8
Release version 2.9.5 (Which will be stable in couple of days)

Let us know for further information.


Thank you!

Posted By: chirag on January 16, 2018, 2:15 pm | Post: 14
Hi,

Sir let us know for further information.
We will be happy to help you.

-----------------------
Chirag Nagda
Software Developer
Softaculous Ltd

Powered By AEF 1.0.8 © 2007-2008 Electron Inc.