XF 2.1 Approval queue not updating

[Stuart Wright]

Relatively new installation of Xenforo 2.1 at www.mgevs.com
Have a registration in the approval queue.
StopForumSpam matched (username: 29). The user name is Mike in a new forum, so I'm approving it.
Click the Approve radio button and Save, and the page reloads exactly the same, so I can't approve the member.
Tried it in Chrome and Edge. Results the same both times.

 

[m1ne]

Mixed Content: The page at 'https://www.mgevs.com/' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://www.mgevs.com/job.php'. This request has been blocked; the content must be served over HTTPS.

 

[Chris D]

That would certainly explain it. The approval queue is processed via job.php.

If it isn't that, then it could be related to a faulty class extension in an add-on.

 

[Stuart Wright]

Just two addons, UIX and User Essentials, both now disabled and the issue still happening.

Mixed Content: The page at 'https://www.mgevs.com/' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://www.mgevs.com/job.php'. This request has been blocked; the content must be served over HTTPS.

So have Nimbus not applied the secure certificate thingy properly, then?

 

[m1ne]

Just two addons, UIX and User Essentials, both now disabled and the issue still happening.

So have Nimbus not applied the secure certificate thingy properly, then?

I'm not sure about that.
Adding $_SERVER['REQUEST_SCHEME'] = 'https'; to config.php might fix.

 

[Stuart Wright]

I'm not sure about that.
Adding $_SERVER['REQUEST_SCHEME'] = 'https'; to config.php might fix.

When I put that line in, I get an error opening the page

This page isn’t working
www.mgevs.com redirected you too many times.

• Try clearing your cookies.

ERR_TOO_MANY_REDIRECTS

Pretty sure the way Nimbus have set up the https is wrong.

 

[Chris D]

Yeah I wouldn't change that config value exactly, though often this helps to workaround it:

$_SERVER['HTTPS'] = 'on';

But, indeed, I'd refer the issue to your host in order to solve the issue properly.

 

[Stuart Wright]

Yeah I wouldn't change that config value exactly, though often this helps to workaround it:

$_SERVER['HTTPS'] = 'on';

But, indeed, I'd refer the issue to your host in order to solve the issue properly.

With that line in, Chris, I get the same This page isn’t working error FYI.

 

[RobParker]

@Stuart when you get a solution could you update us please? I'm getting Nimbus to install our SSL cert this week and any lessons learnt would be appreciated. Thanks!

 

[HWS]

Looks like there is a manual call to 'http://www.mgevs.com/job.php' anywhere (templates?). This needs to be changed to 'https://www.mgevs.com/job.php' to avoid the error.

Your host won't be able to help with that.

 

[Chris D]

That won't be it. There really wouldn't be any need for anyone to try and trigger job.php like that.

It's as has been alluded to above. Specifically the server is reporting that its full base path is http instead of https:



The JavaScript config therefore will perform any AJAX request using http rather than https.