Hi,

I am using https for user logins on my website (and anything /user/*) with the Secure Pages module. User password request form is protected by mollom. All resources on the page are served under https except for the captcha image. And that generates a security warning.

This warning is mild on most browsers, but as can be expected, is real silly and stupid on IE, which brings up a dialog whose default answer leaves the captcha unshown and users confused.

Is there anyway to have this image served securely?

Comments

sun’s picture

sun
Primary language German
Location Karlsruhe
commented

This sounds almost identically to #1109174: Audio CAPTCHA redirect on SSL (via Secure Pages) not handled - duplicate?

sly5’s picture

sly5 commented

This sounds almost identically to #1109174: Audio CAPTCHA redirect on SSL (via Secure Pages) not handled [..]

.. almost. Except that one seems to be worried about audio/image switching issues, and the responses seem to be leading elsewhere

- duplicate?

I am with you on that one: I can not really tell either :) That ticket may be a superset of the problem, but not as succinct and clearly not as obvious on what the problem is as this one.

imiksu’s picture

imiksu
Location Finland
commented
Status: Active » Closed (works as designed)

Mollom does support SSL for Mollom Plus and Mollom Premium accounts only.

If you're using Mollom Free, you will not get the images thru SSL which leads to your problem.

http://mollom.com/faq/does-mollom-support-ssl

sun’s picture

sun
Primary language German
Location Karlsruhe
commented

@sly5: I hope that @iMiksu's explanation is valid for you. Otherwise, please re-open this issue.

imiksu’s picture

imiksu
Location Finland
commented

I was experiencing exactly the same thing, I was also using secure pages and so on...

I tried to manually request the images by SSL and it was not working. After updating account to Mollom Plus, the images started to provide by SSL.

Even if the module would be requesting the images in SSL, Mollom will not response those requests when using Mollom Free.

sun’s picture

sun
Primary language German
Location Karlsruhe
commented

Thanks for letting us know, @iMiksu. I've forwarded and turned this issue into a bug report for Mollom's backend team.

So this is definitely a different issue than #1109174: Audio CAPTCHA redirect on SSL (via Secure Pages) not handled. However, @iMiksu: Are you using Secure Pages, too? In case you also experienced that other issue, you might want to follow up on it.