Breaking HTTPS

Matthew_Compton

Users that have signed in with oneall are breaking our SSL status of the site - particularly referencing their facebook images.

Is there a way to either force all external references to be HTTPS - or to honour the current state?

Claude_Schlesser

Could you please

* Open the file user_interface.php of the plugin.

* Locate this line:
return '<img alt="' . oa_social_login_esc_attr ($alt) . '" src="' . $user_picture . '" class="avatar avatar-social-login avatar-' . $size . ' photo" height="' . $size . '" width="' . $size . '" />';

* Add this code in a new line before the previous line:
$user_picture = preg_replace ('/^https?:/', '', $user_picture);

If you are using BuddyPress then please also:

* Locate this line:
$text = preg_replace ('#<img[^>]+>#i', '<img data-social-login="bp-d1" src="' . $user_picture . '" ' . $img_alt . $img_class . $img_height . $img_width . '/>', $text);

* Add this code in a new line before the previous line:
$user_picture = preg_replace ('/^https?:/', '', $user_picture);