Change http to https in source code when using SSL

Question

I recently enabled Force_SSL on one of my Joomla sites (by enabling "Force SSL" in Global Configuration), but I run into problems with blocked content (non-SSL content) from both Google fonts and several external scripts from JotForm.com (loaded through "http://" in template and content).

For this particular site I solved the problem by going through the code and changing each external http://... reference to https://... or just //..., but my question is:

Could this be solved easier or more efficient by automatically changing http://... to https://... in the source code (with a plugin) or using the .htaccess file?

Answer 1

You definitely want to set up a plugin for this. Basically the goal would be to rewrite any http:// or https:// to just //. As a bonus, we can only do this check inside of tags (so it doesn't affect urls just on the page.

A system plugin with this method should do the trick:

public function onAfterRender() {
    $buffer = JResponse::getBody();
    $pattern = '~(<[^>]{0,}["\'])(https?://)~iU';
    $replacement = '$1//';
    $buffer = preg_replace($pattern, $replacement, $buffer);
    JResponse::setBody($buffer);
}

This probably will still catch something that you don't want replaced with just //, but it is a start!

Answer 2

There is a great plugin for this made by Yireo https://www.yireo.com/software/joomla-extensions/ssl-redirect

Joomla! can be configured to use SSL. But this does not mean that all your secure pages are actually kept secure. This plugin forces what is actually required: HTTPS or HTTP.

Best of all, the developers are very responsive...which makes a world of difference to me.

Answer 3

You don't need to use the protocol in a js link. You can use // and the correct protocol will be selected for you.

Eg.

<script src="//ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js"></script>

I'd just do a global find / replace in my code and leave it like that, and use //src.js going forward.