Help, please, with making a web photo album "secure"

[JoeyG]

I have a personal website for which I use a free certificate from "Let's Encrypt". Yes, I know the difference between it and a "real" certificate. Just for the record, PM generally considers my site (https://www.edu-net.net/) as being "secure".

However, I've just made a little web album for a friend (WARNING!!!! -> Contains CAT pictures), and when I looked at it, I was told that "Pale Moon has blocked content that isn't secure". The program I used to make the album is called "jalbum".

I then went back and checked all the albums I've made with jalbum over the years, and I see that it's the same for all of them .

Could someone, please, tell me what the problem is and what I have to do to get PM to assess the album(s) as secure?

Here's the link: https://www.edu-net.net/media/Danke/

Thank you very much.

[ron_1]

I have no trouble accessing that site at all.

[JoeyG]

Thank you very much for your reply.

Please excuse me, I guess I wasn't clear enough. I have no problem viewing the album.

This is what I'm talking about:


Again, thank you for your message.

[coffeebreak]

The program I used to make the album is called "jalbum".

http://jalbum.net/ isn't secure and it serves a script:

Code: Select all

Error: Blocked loading mixed active content “http://jalbum.net/widgetapi/load.js”
Source File: https://www.edu-net.net/media/Danke/
Line: 133

[JoeyG]

http://jalbum.net/ isn't secure and it serves a script:

Code: Select all

http://jalbum.net/widgetapi/load.js

Oh!

Thank you very much.

Could you please tell me there that appears in the code? I guess I'll have to see if I can get the album to work without it.

Thanks again very much.

[coffeebreak]

there that appears in the code?

There will be something clickable in the console that opens to the location in the source with the error.
Tools menu (or PM button) -> Web Developer -> Error Console
or, -> Browser Console (Ctrl+Shift+J)

Examples:

Error console; click on the edu-net.net url

Or, Browser console; click on Danke:<line number>

Opens to source w/error.

[JoeyG]

There will be something clickable in the console that opens to the location in the source with the error. ...

Thanks again very much.

I think it might be time to look for another slideshow maker.

From the info you've kindly sent, my guess is that the album won't work without that connection to their website for those scripts. Or am I missing something?

Again, my sincere thanks to everyone who responded for your time and effort.

[Moonchild]

You could, of course, always download those scripts and host them locally.

[JoeyG]

You could, of course, always download those scripts and host them locally.

Thanks very much for your reply.

I suppose someone who knows about programming, etc., could do this. In my case, even if I knew where to get the scripts, I have no idea what I'd have to modify in the various files jalbum generates so that it would know where to look for them on my website.

I also have a sneaking suspicion that anything behind the scenes in jalbum is proprietary.

It's not that I'm fundamentally unwilling to expand my horizons. At my stage of the game (I'm 73 years old), though, I've had to look reality in the eye and make choices about what's meaningful to invest my time in.

I make these silly little albums once or twice a year, and they generally meet my requirements and those of my senior-citizen friends.

In any case, thanks again for the suggestion. As I think you know, I'm a huge fan of Pale Moon and Basilisk and extremely appreciative of the effort the team and you put into them.

Keep up the great work.

[vannilla]

You can try the follow, which aims to make as little changes as possible:

Download the script and place it somewhere easy to find on the server hosting your site.
After that, remember the path e.g. /common/jalbum-script.js
Now, change the URL to the jalbum website with the path to your file. It should look like this:

Code: Select all

script.src = "/common/jalbum-script.rb"

It should work now.
If it really does, then you just need to do the same for every previous album (of course no need to download the script every time, just do it once and use the same.)
Though indeed you might want to look into using some other software since doing this all the time is quite bothersome.
Unfortunately I don't know of any.

[JoeyG]

You can try the follow, which aims to make as little changes as possible:

Download the script ...

Thanks very much for your ongoing assistance.

Based on the third of the images in coffeebreak's post, I put this web address in PM: http://jalbum.net/wigitapi/load.js

The jalbum site said, "Page not found".

However, looking at the rest of your tip, I see it says, "jalbum-script.rb".

Any idea as to where I can get this file, please? Hmmm, my search engine says that rb files are written in the Ruby programming language; does this play any role in the story?

... Now, change the URL to the jalbum website with the path to your file. It should look like this:

Code: Select all

script.src = "/common/jalbum-script.rb"

It should work now.

Ummm, where should I make this change, please?

Again, thank you very much.

P.S. It's pretty late here in Berlin. I'm off to sleep now. God willing, I'll follow up in the morning.

Good night to one and all.

[THX-1139]

Odd I don't have this issue, if I hover mouse over url/lock, bubble help shows secure and "Verified by Lets encrypt"
PM 28.8 (64) Win7 (64)

[vannilla]

Based on the third of the images in coffeebreak's post, I put this web address in PM: http://jalbum.net/wigitapi/load.js

The jalbum site said, "Page not found".

That's a problem then.
Maybe you are having problems exactly because the file does not exist anymore.
Unfortunately I can't help with that aside for suggesting using a different software or maybe updating jalbum.

However, looking at the rest of your tip, I see it says, "jalbum-script.rb".

Any idea as to where I can get this file, please? Hmmm, my search engine says that rb files are written in the Ruby programming language; does this play any role in the story?

Ah, sorry, that's a typo.
The "jalbum-script" part is just a name.
It's just that if you could've downloaded the file you could've called it that way or even something else you wanted.
The "rb" part should've been "js" but I'm dumb and accidentally wrote rb.
I did use Ruby recently for unrelated reasons and I ended up making an error here.

Ummm, where should I make this change, please?

Again, thank you very much.

P.S. It's pretty late here in Berlin. I'm off to sleep now. God willing, I'll follow up in the morning.

Good night to one and all.

The change should've been made in the place shown in the third picture posted by coffeebreak, but of course only if you could've downloaded the file at all.

Actually it's the middle of the night here too (we are in the same timezone), but due to a recent illness I am having trouble sleeping, so I thought I'd be of assistance around these parts.
Hopefully I didn't end up making things more confusing!

[coffeebreak]

Based on the third of the images in coffeebreak's post, I put this web address in PM: http://jalbum.net/wigitapi/load.js

The jalbum site said, "Page not found".

JoeyG, your link to the script has a typo.

Put this in the address bar, it will work: http://jalbum.net/widgetapi/load.js

[JoeyG]

Good morning (actually it's already afternoon).

Again, my thanks to all who have contributed.

I don't want to say that I'm smarter than I look (which probably wouldn't be hard), but given the discussion here and on the jalbum forum, I've managed to fix the problem in a very simple way.

I edited the index.html page and replaced every instance of http:// with https://

That's all it took.



Again, my thanks to everyone.

This case is closed.