How to disable SSL that doesn't exist

Discussion regarding Joomla! 3.x security issues.

Moderators: Bernard T, mandville, fcoulter, PhilD, General Support Moderators

Forum rules
Forum Rules
Absolute Beginner's Guide to Joomla! <-- please read before posting, this means YOU.
Forum Post Assistant / FPA - If you are serious about wanting help, you will use this tool to help you post.
patipat
Joomla! Apprentice
Joomla! Apprentice
Posts: 13
Joined: Wed Aug 07, 2013 1:49 am

How to disable SSL that doesn't exist

Postby patipat » Sun Mar 19, 2017 3:38 am

I can't find nowhere solution for my problem. I will be grateful for help.

Problem:

I forced SSL for my Joomla site though I had no SSL certificate bought. It worked. Of course before I could see my site under https://mysite.xyz, I saw info in my browser that there is some danger because certificate is wrong and I had to make an exception in the browser's rules to see webpage. Still I was satisfied because I felt safe when I logged to the site's back-end at https://mysite.xyz/administrator.
Yesterday I wanted to disable ssl from my front-end so no warning info would show up to my visitors but...I can't do it. Instead of http://mysite.xyz/ I always see https://mysite.xyz/.

I was trying to change it through: changing System-Global Configuration-Server tab-Force HTTPS parameters (I see in configuration.php that 'public $force_ssl' is changing correctly); changing name of .htaccess to htaccess.bak but nothing works...

I don't want people to be afraid of my site just because there is that terrible info about wrong certificate... I am using Joomla 3.6.5.
If anybody knows how to disable SSL, help me, please.

User avatar
cybersalt
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 106
Joined: Thu Aug 25, 2005 10:36 pm
Location: Victoria, Canada
Contact:

Re: How to disable SSL that doesn't exist

Postby cybersalt » Sun Mar 19, 2017 6:51 am

If you have turned off force ssl in the configuration and your .htaccess file has no coding to rewrite urls to secure ones, I wonder if you are running into a caching problem with your browser.

What is the address of your site?

Also, are you using an other extensions that rewrite or cache your urls?
Tim Davis
Basic Joomla Tutorials | Cybersalt Consulting and Communications
https://www.cybersalt.com

patipat
Joomla! Apprentice
Joomla! Apprentice
Posts: 13
Joined: Wed Aug 07, 2013 1:49 am

Re: How to disable SSL that doesn't exist

Postby patipat » Sun Mar 19, 2017 11:36 am

My address: http://www.gdziezmianaopon.pl

I have no special extensions to rewrite/cache urls.
There is admin tools but when I disabled it nothing changed.
I was entering my site with different browsers on different computers.
My site is set in shared hoster servers.

Now I have disabled all extensions I had installed on my own and left enabled just akeeba tools and akeeba backup. Additionally I left now 'Force HTTPS' option set on 'Administrator Only' /but when it was set on 'None' it didn't work either/.

Site still redirects to https... This is crazy.

User avatar
cybersalt
Joomla! Enthusiast
Joomla! Enthusiast
Posts: 106
Joined: Thu Aug 25, 2005 10:36 pm
Location: Victoria, Canada
Contact:

Re: How to disable SSL that doesn't exist

Postby cybersalt » Sun Mar 19, 2017 10:20 pm

Do you maybe have the HTTPS URL in the live URL in the configuration.php file?
Tim Davis
Basic Joomla Tutorials | Cybersalt Consulting and Communications
https://www.cybersalt.com


Return to “Security in Joomla! 3.x”

Who is online

Users browsing this forum: No registered users and 8 guests