Please upgrade here. These earlier versions are no longer being updated and have security issues.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.
Options

Fix to Gravatar plugin for SSL

edited November 2010 in Vanilla 2.0 - 2.8
For line 75:
if(strlen(trim($_SERVER['HTTPS']))>0 || $_SERVER['SERVER_PORT']==443){
$User->Photo = 'https://secure.gravatar.com/avatar.php?'
.'gravatar_id='.md5(strtolower($Object->$Email))
.'&default='.urlencode(Asset(Gdn::Config('Plugins.Gravatar.DefaultAvatar', 'plugins/Gravatar/default.gif'), TRUE))
.'&size='.Gdn::Config('Garden.Thumbnail.Width', 40);
}else{
$User->Photo = 'http://www.gravatar.com/avatar.php?'
.'gravatar_id='.md5(strtolower($Object->$Email))
.'&default='.urlencode(Asset(Gdn::Config('Plugins.Gravatar.DefaultAvatar', 'plugins/Gravatar/default.gif'), TRUE))
.'&size='.Gdn::Config('Garden.Thumbnail.Width', 40);
}

Don't add this until http://vanillaforums.org/discussion/13533/urls-that-begin-with-https-are-treated-as-relative-paths-instead-of-absolute-paths is fixed, as this not work until urls starting with https are treated as relative paths.

Comments

Sign In or Register to comment.