AW: htaccess rewrite rule to https let my apps stop working

[Tiemo Hollmann TB via use-livecode]

I used the rewrite conditions to https from Matthias in the root of my
domain and build a new LC 8.1.5 standalone including the revsecurity.dll.
like Tom pointed out, but I still get an error.
The return value of my php is surprisingly some garbage html code instead of
my php return value and "the result" of my put URL statement is: " tsneterr:
HTTP response code 401 returned from server".
The only "special" thing I can see on my domain is, that I have another
htaccess in the directory of my PHPs, with a password protection for this
sub-dir, which works since years fine without this rewrite condition. The
"401" error (authentication failed) points to this password protection in
the sub-htaccess.
But I don't see the relation of the rewrite condition in the root htaccess
to this password authentication in the php directory. There is the end of my
server knowledge.
Can anybody shed some light on this?
Thanks
Tiemo


-Ursprüngliche Nachricht-
Von: use-livecode [mailto:use-livecode-boun...@lists.runrev.com] Im Auftrag
von tbodine via use-livecode
Gesendet: Freitag, 18. August 2017 16:47
An: use-revolut...@lists.runrev.com
Cc: tbodine <bod...@bodinetraininggames.com>
Betreff: Re: AW: htaccess rewrite rule to https let my apps stop working

T.

Had a similar experience while migrating my site to https. What I found was
my standalones were missing the revsecurity.dll external. After rebuilding
those to include revsecurity.dll, the standalones were able to contact my
site and access stacks and other files there without changing my links from
http to https, since the htaccess was managing that.

Notes: On Windows, that must be at the same level as the standalone exe
itself rather than the externals folder. And codesign your externals as well
as standalones.

HTH,
Tom B.

 





--
View this message in context:
http://runtime-revolution.278305.n4.nabble.com/htaccess-rewrite-rule-to-http
s-let-my-apps-stop-working-tp4718561p4718572.html
Sent from the Revolution - User mailing list archive at Nabble.com.

___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode


___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Re: htaccess rewrite rule to https let my apps stop working

[Sannyasin Brahmanathaswami via use-livecode]

T. 

Yes mod-rewrite is the way to go. What Matthias sent is how we are doing it.

but for backwards compatibility in our apps I also include a function to 

replace http://  with https://

in any URL in our apps. 

BR

 
 

___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Re: AW: htaccess rewrite rule to https let my apps stop working

[tbodine via use-livecode]

T.

Had a similar experience while migrating my site to https. What I found was
my standalones were missing the revsecurity.dll external. After rebuilding
those to include revsecurity.dll, the standalones were able to contact my
site and access stacks and other files there without changing my links from
http to https, since the htaccess was managing that.

Notes: On Windows, that must be at the same level as the standalone exe
itself rather than the externals folder. And codesign your externals as well
as standalones.

HTH,
Tom B.

 





--
View this message in context: 
http://runtime-revolution.278305.n4.nabble.com/htaccess-rewrite-rule-to-https-let-my-apps-stop-working-tp4718561p4718572.html
Sent from the Revolution - User mailing list archive at Nabble.com.

___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Re: htaccess rewrite rule to https let my apps stop working

[Matthias Rebbe via use-livecode]

Hi Tiemo,
although i was pretty sure that this works here i´ve checked again.
From the message box i called an .lc script  which exports db data. I used 
http:// as prefix and the data was returned w/o a problem.

Calling the same url from browser works the same. It isautomatically redirected 
by the server and the data is returned.

We are calling lc and php scripts on our server from our programs to fetch data 
and all is working.

Btw.: Maybe this is of interest for the one or the other.
Today we´ve created the first Rapidweaver page which uses a livecode server 
script for form processing and db access directly in a stack instead of showing 
that lc script in a frame. I´ve never have thought that this will work. It´s 
very simple to integrate.




> Am 18.08.2017 um 15:28 schrieb Tiemo Hollmann TB via use-livecode 
> <use-livecode@lists.runrev.com>:
> 
> Hi Matthias,
> Thanks for your example, I'll give it a try
> using these Rewrite rules, you could stay with plain http:// URLs in your LC 
> code? And LC doesn't notice the difference and everything works as before? Do 
> you call PHPs on your server? Could there be a difference between html and 
> php calls with return values?
> Tiemo
> 
> 
> -Ursprüngliche Nachricht-
> Von: use-livecode [mailto:use-livecode-boun...@lists.runrev.com] Im Auftrag 
> von Matthias Rebbe via use-livecode
> Gesendet: Freitag, 18. August 2017 14:42
> An: How to use LiveCode <use-livecode@lists.runrev.com>
> Cc: Matthias Rebbe <matthias_livecode_150...@m-r-d.de>
> Betreff: Re: htaccess rewrite rule to https let my apps stop working
> 
> Hi Tiemo,
> 
> it´s messed up.
> Please use the link
> https://dl.qck.nu//?dl=sample_htaccess.txt 
> <https://dl.qck.nu//?dl=sample_htaccess.txt>
> to download the textfile.
> 
> I´ve forgot to mention that you have to replace yourdomain.com 
> <http://yourdomain.com/> with your domain.
> 
> Matthias
>> Am 18.08.2017 um 14:25 schrieb Matthias Rebbe via use-livecode 
>> <use-livecode@lists.runrev.com <mailto:use-livecode@lists.runrev.com>>:
>> 
>> Hi Tiemo,
>> 
>> we are using the following code in the htaccess to redirect  http:// 
>> request (either with or without www) to https://www.multitronic.de 
>> <https://www.multitronic.de/> <https://www.multitronic.de/ 
>> <https://www.multitronic.de/>>
>> 
>> RewriteEngine on
>> RewriteCond %{HTTPS} off
>> RewriteCond %{HTTP_HOST} ^yourdomain.com <http://yourdomain.com/> 
>> <http://yourdomain.com/ <http://yourdomain.com/>>$ [NC,OR] RewriteCond 
>> %{HTTP_HOST} ^www.yourdomain.com <http://www.yourdomain.com/> 
>> <http://www.yourdomain.com/ <http://www.yourdomain.com/>>$ [NC] 
>> RewriteRule (.*) https://www.yourdomain.com/$1 
>> <https://www.yourdomain.com/$1> <https://www.yourdomain.com/$1 
>> <https://www.yourdomain.com/$1>> [R=301,L] RewriteCond %{HTTP_HOST} 
>> ^yourdomain.com <http://yourdomain.com/> <http://yourdomain.com/ 
>> <http://yourdomain.com/>>$ [NC] RewriteRule (.*) 
>> https://www.yourdomain.com/$1 <https://www.yourdomain.com/$1> 
>> <https://www.yourdomain.com/$1 <https://www.yourdomain.com/$1>> 
>> [R=301,L]
>> 
>> 
>> if the sample code is mixed up then you´ll find it also here as text 
>> file for download
>> 
>> https://dl.qck.nu//?dl=sample_htaccess.txt 
>> <https://dl.qck.nu//?dl=sample_htaccess.txt> 
>> <https://dl.qck.nu//?dl=sample_htaccess.txt 
>> <https://dl.qck.nu//?dl=sample_htaccess.txt>>
>> 
>> 
>> HTH
>> Matthias
>> 
> 
> ___
> use-livecode mailing list
> use-livecode@lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your subscription 
> preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode
> 
> 
> ___
> use-livecode mailing list
> use-livecode@lists.runrev.com
> Please visit this url to subscribe, unsubscribe and manage your subscription 
> preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode

___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

AW: htaccess rewrite rule to https let my apps stop working

[Tiemo Hollmann TB via use-livecode]

Hi Matthias,
Thanks for your example, I'll give it a try
using these Rewrite rules, you could stay with plain http:// URLs in your LC 
code? And LC doesn't notice the difference and everything works as before? Do 
you call PHPs on your server? Could there be a difference between html and php 
calls with return values?
Tiemo


-Ursprüngliche Nachricht-
Von: use-livecode [mailto:use-livecode-boun...@lists.runrev.com] Im Auftrag von 
Matthias Rebbe via use-livecode
Gesendet: Freitag, 18. August 2017 14:42
An: How to use LiveCode <use-livecode@lists.runrev.com>
Cc: Matthias Rebbe <matthias_livecode_150...@m-r-d.de>
Betreff: Re: htaccess rewrite rule to https let my apps stop working

Hi Tiemo,

it´s messed up.
Please use the link
https://dl.qck.nu//?dl=sample_htaccess.txt 
<https://dl.qck.nu//?dl=sample_htaccess.txt>
to download the textfile.

I´ve forgot to mention that you have to replace yourdomain.com 
<http://yourdomain.com/> with your domain.

Matthias
> Am 18.08.2017 um 14:25 schrieb Matthias Rebbe via use-livecode 
> <use-livecode@lists.runrev.com <mailto:use-livecode@lists.runrev.com>>:
> 
> Hi Tiemo,
> 
> we are using the following code in the htaccess to redirect  http:// 
> request (either with or without www) to https://www.multitronic.de 
> <https://www.multitronic.de/> <https://www.multitronic.de/ 
> <https://www.multitronic.de/>>
> 
> RewriteEngine on
> RewriteCond %{HTTPS} off
> RewriteCond %{HTTP_HOST} ^yourdomain.com <http://yourdomain.com/> 
> <http://yourdomain.com/ <http://yourdomain.com/>>$ [NC,OR] RewriteCond 
> %{HTTP_HOST} ^www.yourdomain.com <http://www.yourdomain.com/> 
> <http://www.yourdomain.com/ <http://www.yourdomain.com/>>$ [NC] 
> RewriteRule (.*) https://www.yourdomain.com/$1 
> <https://www.yourdomain.com/$1> <https://www.yourdomain.com/$1 
> <https://www.yourdomain.com/$1>> [R=301,L] RewriteCond %{HTTP_HOST} 
> ^yourdomain.com <http://yourdomain.com/> <http://yourdomain.com/ 
> <http://yourdomain.com/>>$ [NC] RewriteRule (.*) 
> https://www.yourdomain.com/$1 <https://www.yourdomain.com/$1> 
> <https://www.yourdomain.com/$1 <https://www.yourdomain.com/$1>> 
> [R=301,L]
> 
> 
> if the sample code is mixed up then you´ll find it also here as text 
> file for download
> 
> https://dl.qck.nu//?dl=sample_htaccess.txt 
> <https://dl.qck.nu//?dl=sample_htaccess.txt> 
> <https://dl.qck.nu//?dl=sample_htaccess.txt 
> <https://dl.qck.nu//?dl=sample_htaccess.txt>>
> 
> 
> HTH
> Matthias
> 

___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode


___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

AW: htaccess rewrite rule to https let my apps stop working

[Tiemo Hollmann TB via use-livecode]

Hi Mark,

I think the oldest version was build with LC 6.7. As far as I can see that
version supports https.
Is there any characteristic on the standalone, to identify the engine
version used?
I will give a redirect a try. Thanks for your ideas

Tiemo

-Ursprüngliche Nachricht-
Von: use-livecode [mailto:use-livecode-boun...@lists.runrev.com] Im Auftrag
von Mark Waddingham via use-livecode
Gesendet: Freitag, 18. August 2017 14:15
An: How to use LiveCode <use-livecode@lists.runrev.com>
Cc: Mark Waddingham <m...@livecode.com>
Betreff: Re: htaccess rewrite rule to https let my apps stop working

On 2017-08-18 13:58, Tiemo Hollmann TB via use-livecode wrote:
> Hello,
> 
> I attached a certificate to our domain and started switching our 
> domain / web from http to https, because of the security alerts of 
> some browsers saying that our site isn't safe. So far so good. Our web 
> hoster recommended to put a rewrite rule into the htaccess to redirect 
> all http calls on https.
> So far so good. That works fine with all URLs in a browser.

I wonder if using a URL redirect, rather than rewrite might work better:

https://www.digitalocean.com/community/tutorials/how-to-create-temporary-and
-permanent-redirects-with-apache-and-nginx

I might be wrong here but I think rewriting just changes the path which
apache uses to determine what to return; a redirect causes a 'Redirection'
return value to the client so the client can refetch at the (redirected)
URL.

> I can't just change all URLs in all my LC programs from http to https, 
> because my customers have lots of old version of my programs out 
> there, which are not anymore maintained, which were created with any 
> very old LC version I don't know anymore, etc.

Unless the distributed versions built with old versions of LiveCode were
built with HTTPS support built-in then they are very unlikely to work with
either a redirect or rewrite.

Even if you do a redirect/rewrite on the server, the client has to be able
to handle the protocol which the server produces correctly.

Warmest Regards,

Mark.

--
Mark Waddingham ~ m...@livecode.com ~ http://www.livecode.com/
LiveCode: Everyone can create apps

___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode


___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Re: htaccess rewrite rule to https let my apps stop working

[Matthias Rebbe via use-livecode]

Hi Tiemo,

it´s messed up.
Please use the link
https://dl.qck.nu//?dl=sample_htaccess.txt 

to download the textfile.

I´ve forgot to mention that you have to replace yourdomain.com 
 with your domain.

Matthias
> Am 18.08.2017 um 14:25 schrieb Matthias Rebbe via use-livecode 
> >:
> 
> Hi Tiemo,
> 
> we are using the following code in the htaccess to redirect  http:// request 
> (either with or without www) to https://www.multitronic.de 
>   >
> 
> RewriteEngine on
> RewriteCond %{HTTPS} off
> RewriteCond %{HTTP_HOST} ^yourdomain.com  
> >$ [NC,OR]
> RewriteCond %{HTTP_HOST} ^www.yourdomain.com  
> >$ [NC]
> RewriteRule (.*) https://www.yourdomain.com/$1 
>   > [R=301,L]
> RewriteCond %{HTTP_HOST} ^yourdomain.com  
> >$ [NC]
> RewriteRule (.*) https://www.yourdomain.com/$1 
>   > [R=301,L]
> 
> 
> if the sample code is mixed up then you´ll find it also here as text file for 
> download
> 
> https://dl.qck.nu//?dl=sample_htaccess.txt 
>  
>  >
> 
> 
> HTH
> Matthias
> 

___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Re: htaccess rewrite rule to https let my apps stop working

[Matthias Rebbe via use-livecode]

Hi Tiemo,

we are using the following code in the htaccess to redirect  http:// request 
(either with or without www) to https://www.multitronic.de 


RewriteEngine on
RewriteCond %{HTTPS} off
RewriteCond %{HTTP_HOST} ^yourdomain.com $ [NC,OR]
RewriteCond %{HTTP_HOST} ^www.yourdomain.com $ [NC]
RewriteRule (.*) https://www.yourdomain.com/$1  
[R=301,L]
RewriteCond %{HTTP_HOST} ^yourdomain.com $ [NC]
RewriteRule (.*) https://www.yourdomain.com/$1  
[R=301,L]


if the sample code is mixed up then you´ll find it also here as text file for 
download

https://dl.qck.nu//?dl=sample_htaccess.txt 



HTH
Matthias


> Am 18.08.2017 um 13:58 schrieb Tiemo Hollmann TB via use-livecode 
> >:
> 
> Hello,
> 
> I attached a certificate to our domain and started switching our domain /
> web from http to https, because of the security alerts of some browsers
> saying that our site isn't safe. So far so good. Our web hoster recommended
> to put a rewrite rule into the htaccess to redirect all http calls on https.
> So far so good. That works fine with all URLs in a browser.
> 
> BUT all of my LiveCode programs with http:// calls for php programs on my
> server don't work anymore. I get different errors.
> 
> I am not good with what is happening behind the scenes of htaccess rewrite
> rules and have no idea if and what I could do, beside of changing all http
> calls in my LC programs to https. My thinking was, that the rewrite rule
> would just switch each http call to https on the server, but keeps finding
> all html and php files. That works obviously fine with all URLs in a
> browser. But why doesn't my LC program likes that rewriting? The PHP
> programs should be found the same with https and should return the wanted
> value as with http - or not? How is LiveCode affected by this rewrite?
> 
> I can't just change all URLs in all my LC programs from http to https,
> because my customers have lots of old version of my programs out there,
> which are not anymore maintained, which were created with any very old LC
> version I don't know anymore, etc.
> 
> Any light on what is going wrong to my LC URL calls and if there is anything
> I can do is highly appreciated.
> 
> Tiemo
> 
> 
> 
> 
> 
> ___
> use-livecode mailing list
> use-livecode@lists.runrev.com 
> Please visit this url to subscribe, unsubscribe and manage your subscription 
> preferences:
> http://lists.runrev.com/mailman/listinfo/use-livecode

___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

Re: htaccess rewrite rule to https let my apps stop working

[Mark Waddingham via use-livecode]

On 2017-08-18 13:58, Tiemo Hollmann TB via use-livecode wrote:

Hello,

I attached a certificate to our domain and started switching our domain 
/

web from http to https, because of the security alerts of some browsers
saying that our site isn't safe. So far so good. Our web hoster 
recommended
to put a rewrite rule into the htaccess to redirect all http calls on 
https.

So far so good. That works fine with all URLs in a browser.


I wonder if using a URL redirect, rather than rewrite might work better:

https://www.digitalocean.com/community/tutorials/how-to-create-temporary-and-permanent-redirects-with-apache-and-nginx

I might be wrong here but I think rewriting just changes the path which 
apache uses to determine what to return; a redirect causes a 
'Redirection' return value to the client so the client can refetch at 
the (redirected) URL.



I can't just change all URLs in all my LC programs from http to https,
because my customers have lots of old version of my programs out there,
which are not anymore maintained, which were created with any very old 
LC

version I don't know anymore, etc.


Unless the distributed versions built with old versions of LiveCode were 
built with HTTPS support built-in then they are very unlikely to work 
with either a redirect or rewrite.


Even if you do a redirect/rewrite on the server, the client has to be 
able to handle the protocol which the server produces correctly.


Warmest Regards,

Mark.

--
Mark Waddingham ~ m...@livecode.com ~ http://www.livecode.com/
LiveCode: Everyone can create apps

___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode

htaccess rewrite rule to https let my apps stop working

[Tiemo Hollmann TB via use-livecode]

Hello,

I attached a certificate to our domain and started switching our domain /
web from http to https, because of the security alerts of some browsers
saying that our site isn't safe. So far so good. Our web hoster recommended
to put a rewrite rule into the htaccess to redirect all http calls on https.
So far so good. That works fine with all URLs in a browser.

BUT all of my LiveCode programs with http:// calls for php programs on my
server don't work anymore. I get different errors.

I am not good with what is happening behind the scenes of htaccess rewrite
rules and have no idea if and what I could do, beside of changing all http
calls in my LC programs to https. My thinking was, that the rewrite rule
would just switch each http call to https on the server, but keeps finding
all html and php files. That works obviously fine with all URLs in a
browser. But why doesn't my LC program likes that rewriting? The PHP
programs should be found the same with https and should return the wanted
value as with http - or not? How is LiveCode affected by this rewrite?

I can't just change all URLs in all my LC programs from http to https,
because my customers have lots of old version of my programs out there,
which are not anymore maintained, which were created with any very old LC
version I don't know anymore, etc.

Any light on what is going wrong to my LC URL calls and if there is anything
I can do is highly appreciated.

Tiemo

 

 

___
use-livecode mailing list
use-livecode@lists.runrev.com
Please visit this url to subscribe, unsubscribe and manage your subscription 
preferences:
http://lists.runrev.com/mailman/listinfo/use-livecode