[confirmed] Insecure resources on HTTPS sites

[DubTech]

This is just a minor bug I've noticed with WHMCS on HTTPS sites. I'm not sure if it's just me experiencing this or if others are too.

 

When I visit the admin area of my site and the popup window appears on the homepage, stating your version and recent news or messages from WHMCS, it is loaded over insecure connections (HTTP) and gives a warning. My main installation which has this message disabled (do not show this again until new updates are available) does not receive the warning since it isn't being loaded. I also noticed recaptchas don't load properly with this, since they aren't running on https either. The only warning is in the URL bar, however if the client side shows anything similar it may cause it to not function properly.

 

My site is running on cloudflare and using their free universal SSL, so the fact the server isn't serving the site on SSL may be causing part of the issue. I'm not sure if there's an error with the configuration or if this is purely an issue on the inside of the system, but I know it could be fixed in the templates or wherever the content is produced.

 

I have my system URL set up for https and the SSL system URL is blank (making it the same doesn't set it).

[WHMCS Nate]

Hello,

 

I have reproduced this issue and opened CORE-8349 to track its resolution with our development team.

 

Have a great day.

 

Nate C