Skip to main content
16 votes

Integration not secure

If you use an empty "Callback URL" or "Identity link URL" for the integration, then run these SQL queries to remove the error UPDATE `integration` set `endpoint` = '' where `...
lemk0's user avatar
  • 608
5 votes
Accepted

Magento 2: Custom Form Security

To secure custom forms, you should take care of the following: 1. Add frontend validation This will not just help the user entering the data in the right form, but might also prevent standard typing ...
Anna Völkl's user avatar
  • 17.3k
4 votes

form post - getURL secure (HTTPS / SSL)

You can do so by using the _secure parameter: <?php echo Mage::getUrl('productquestions/productquestions/saveanswers',array('product_questions_id'=>$id, '_secure' => true));?>
Raphael at Digital Pianism's user avatar
3 votes
Accepted

Can't set "Use Secure URLs in Frontend"

Seems that no admin settings could be saved. I went into the Magento database and set core_config_data.web/secure/use_in_frontend to 1 core_config_data.web/secure/use_in_adminhtml to 1 This allowed ...
Daniel Flippance's user avatar
3 votes
Accepted

Integration not secure

The message is renderer from Magento\Integration\Block\Adminhtml\Widget\Grid\Column\Renderer\Name.php::render() function. The function will check your URLS (Identity link URL,Callback URL) should used ...
S.P's user avatar
  • 1,554
3 votes

Magento2.3.2: url shows http instead of https

First Check status: select * from `core_config_data` WHERE `core_config_data`.`path` = "web/secure/use_in_frontend"; select * from `core_config_data` WHERE `core_config_data`.`path` = "...
matinict's user avatar
  • 1,559
2 votes

Magento2.3.2: url shows http instead of https

You need to set the both configuration to Yes: web/secure/use_in_frontend web/secure/use_in_adminhtml Now set URL value to https : bin/magento config:set web/secure/base_url https://depoto.com/ Now ...
Dhiren Vasoya's user avatar
2 votes

What is the use of [_secure => true] in controller redirect path argument in Magento 2

Figured out it Fundamentally it's a parameter which is set. The getting and setting of the parameter does nothing more than set or get the value. https://github.com/magento/magento2/blob/2.3/lib/...
Dominic Pixie's user avatar
2 votes

Moving site to https killed my traffic, suggestions?

From the sound of your question, you simply switched to https and did not think about some of the problems that might arise: did you change all your internal links and image-sources to https? did you ...
simonthesorcerer's user avatar
1 vote

Integration not secure

Open the table "integration" and you can see null values in the "endpoint" and "identity_link_url" fields. Remove null values.
kanishka maduranga's user avatar
1 vote

How To Test SSL On Development Server Without SSL Certificate

If your development server can be reached publicly, you can use the free certificate authority LetsEncrypt.org, otherwise your best option is probably to just generate a self-signed certificate. Your ...
fantasticrice's user avatar
1 vote

PHPSESSID: Session Cookie Does Not Contain the "Secure" Attribute

Provided you are accessing your site over HTTPS and you have no custom code modifying the cookie secure values, you shouldn't need to modify the core code to serve PHPSESSIONID as secure. As its ...
Sam's user avatar
  • 1,910
1 vote

PHPSESSID: Session Cookie Does Not Contain the "Secure" Attribute

You probably looking for class SecurityInfo which implements SecurityInfoInterface in file path; Magento\Framework\Url\SecurityInfo.php
fmsthird's user avatar
  • 4,592
1 vote

Magento 2 : How to set secure cookie OR HTTP ONLY FLAG SET

Magento doesn't have specific configuration for this but there is a logic in Session config files. If your secure and unsecure urls are equal (and https of course), magento sets the cookies as secure ...
cyildirim's user avatar
  • 160
1 vote

Magento 2 : How to set secure cookie OR HTTP ONLY FLAG SET

Go to Stores > Configuration > (General) > Web > Default Cookie Settings Cookie Lifetime. It’s how long Cookie files stay on user’s computer. By default it’s set as 3600 seconds which is equal to ...
Aditya Shah's user avatar
  • 7,627
1 vote
Accepted

Magento 2.1 - Sitemap XML Doesn't change to HTTPS

https://github.com/magento/magento2/issues/8644 shows this issue to have been fixed in versions 2.1.9 and 2.2.0. The workaround below appears to work if you're unable to update your store. Update the ...
Mat Hellums's user avatar
1 vote
Accepted

Magento secure URL directive?

You can pass parameter : _secure=1 And for force secure url _force_secure=1 See example : <a href="{{store direct_url="" _secure=1}}">Link title</a> And for Force Secure Url : <a ...
Kul's user avatar
  • 1,797
1 vote
Accepted

Do I need an SSL certificate with Magento 2.1.0?

Yes. It's not about hiding scary messages, it is about protecting your customers. And this is important, even if the payment is handled by PayPal (and PayPal uses SSL). Can people create an account ...
Fabian Schmengler's user avatar
1 vote
Accepted

SSL Mixed Content issue in secure pages

Fixed it using the first answer of this Use secure urls on front end breaks ajax loading into cart my url was $this->getUrl('checkout/cart/updatePost'). Replaced it with $this->getUrl('...
Lakshin Karunaratne's user avatar
1 vote
Accepted

Current base_url (secure/unsecure?) in block

I hope you've found your answer by this time, but I'll answer it for future Googlers: You shouldn't use a config directive for this, but use {{store url="customer/account"}}. It produces the same ...
Mark van der Sanden's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible