Please upgrade here. These earlier versions are no longer being updated and have security issues.
HackerOne users: Testing against this community violates our program's Terms of Service and will result in your bounty being denied.

Embed Vanilla into Facebook : Supports only https: sites?

Does the embed Vanilla into Facebook as instructed here:-

http://vanillaforums.com/blog/help/embedding-a-vanilla-forum-on-a-facebook-page/

Does it support only https sites? This is what I get:-

image

Comments

  • I recall this not being the case earlier. If it is so, the documentation mentioned earler needs to be updated. Can someone give me some clarity on this?

  • vrijvlindervrijvlinder Papillon-Sauvage MVP
    edited November 2012

    Yes you can embed a forum into a facebook page using an html app. The problem with doing this is that the space fB gives is not enough and you will need to tweak the theme to fit into the space.

    Loging in may not work using the pop up because of ssl. If the site you host your forum from is not using ssl the login forms will not work. To get around this you must put a blank target link to open the log in in another page.Better yet put a blank target link to open the forum in another page not fb.

  • Yes, you need to provide https. Facebook updated their policy a while ago.

  • vrijvlindervrijvlinder Papillon-Sauvage MVP

    funny note here, even with ssl fb still gets hacked. lol but it is nothing they can do because of how people share links and content. All the apps are run on external servers, they can also be hacked.

    The biggest issue is the fake log in forms. Even with ssl one can be a victim if one is not vigilant and pays attention....good luck with that.

    It is not cheap to get ssl for your site. But if you charge using credit cards or paypal you just have to invest in making it safe for people.

  • Has anyone tried the free SSL? or the cheapest ones provided by namescheap at 7 bucks/year ?

    Will they suffice?

    http://www.positivessl.com/ssl-certificate-products/free-ssl-certificate.html

    http://www.cacert.org/

    https://startssl.com/?app=1

    Does fb accept the free ones?

  • Thanks for your kind reply @vrijvlinder @HalfCat :-)

  • x00x00 MVP
    edited November 2012

    I seem to remember the script need to be changed so that scheme is https. There is already two version of the mebed script, the plugin version and the core version. Grab the code from one and change instances of 'http://' to 'https://' (except in places where it isn't using it to determine the url such as host.replace('http://', '').replace('https://', '');)

    grep is your friend.

Sign In or Register to comment.