Embed Vanilla into Facebook : Supports only https: sites?

neyawn

Does the embed Vanilla into Facebook as instructed here:-

http://vanillaforums.com/blog/help/embedding-a-vanilla-forum-on-a-facebook-page/

Does it support only https sites? This is what I get:-

neyawn

I recall this not being the case earlier. If it is so, the documentation mentioned earler needs to be updated. Can someone give me some clarity on this?

vrijvlinder

Yes you can embed a forum into a facebook page using an html app. The problem with doing this is that the space fB gives is not enough and you will need to tweak the theme to fit into the space.

Loging in may not work using the pop up because of ssl. If the site you host your forum from is not using ssl the login forms will not work. To get around this you must put a blank target link to open the log in in another page.Better yet put a blank target link to open the forum in another page not fb.

HalfCat

Yes, you need to provide https. Facebook updated their policy a while ago.

vrijvlinder

funny note here, even with ssl fb still gets hacked. lol but it is nothing they can do because of how people share links and content. All the apps are run on external servers, they can also be hacked.

The biggest issue is the fake log in forms. Even with ssl one can be a victim if one is not vigilant and pays attention....good luck with that.

It is not cheap to get ssl for your site. But if you charge using credit cards or paypal you just have to invest in making it safe for people.

neyawn

Has anyone tried the free SSL? or the cheapest ones provided by namescheap at 7 bucks/year ?

Will they suffice?

http://www.positivessl.com/ssl-certificate-products/free-ssl-certificate.html

http://www.cacert.org/

https://startssl.com/?app=1

Does fb accept the free ones?

neyawn

Thanks for your kind reply @vrijvlinder @HalfCat :-)

x00

I seem to remember the script need to be changed so that scheme is https. There is already two version of the mebed script, the plugin version and the core version. Grab the code from one and change instances of 'http://' to 'https://' (except in places where it isn't using it to determine the url such as host.replace('http://', '').replace('https://', '');)