Phil Flynn brought to my attention that pdf files couldn't be viewed when saved in RedGloo's filesystem. This came as a surprise to me, as I definately could view them. I tried for sanity sake to view the file using IE (I use Firefox) and it didn't show…
This really surprised me, and I tried to look for several options. By chance I found a MS bug report where it was tied to the https protocol (MS claiming it as expected behaviour). I tried to view the pdf file using the http protocol. This worked!
I have now removed https from the default url, and only use https for login purposes. This is something I wanted to do for some time, but didn't get around until now…
Cheers for fixing this 🙂
Yay for Karsten's voyage of discovery and refusal to be beaten by the system 😉
Is there any way to force the system to use HTTPS all the time, if, like me, you want it encrypted all the time?
At the moment I'm having to use NoScript in Firefox to force the site to go HTTPS when it keeps trying to redirect me to HTTP. If the encryption is there, I want to use it, especially since it's linked to an important username and password (even if just to mitigate the miniscule risk of session hijacking if login always goes over HTTPS). 😉
Yes – Login always go https using redirection and manually double-checking in the login php file to see if https was used. So I hope we are fairly secured there 😉
Https works on all pages (as we used it before the reported IE-bug), but at the moment it isn't an individual choice, but a for-all-users setting. I think that if you can use NoScript or GreaseMonkey (which I believe can redirect from specific urls to another) then that would be the best option.
Karsten, there seems to be another bug… my pdf files that i'm uploading are set to be viewed by logged in users only. if people are not logged in, which they normally wont be, try to visit the link directly they are served a blank page. no error, no option to log in, nothing. also if they try to visit my file store they will obviously see only those that are public. it is not obvious that there might be more files available if they log in, and so without encouragement they won't…
If you go to my file store there is a folder in there with PDF's in that you can use as an example.
Cheers
Unfortunately that is (at the moment) expected behaviour, or in other words, I know about this bug already.
To start with your issues in reverse order:
I think that the system is behaving as it should when it doesn't show that there is content a user isn't allowed to see. It is you, as the user, who has said that it is only for logged in people to see. I have content which is only private to me, and I like that nobody else can see that it is there…
The blank page problem is due to php error handling. Normally this would not happen, because people without access rights wouldn't have access to the url (unless you have given it to them personally, in which case they need t be told to log in before viewing). Right now there is a bug in the code showing on the frontpage, so once in a while "broken" links show up. We are dicussing how we want to change it in the future. It would also be nice to change the blank screen to something more useful…