Hi All,

I've installed DISQUS Comments on my Joomla 3.2.1 site.  When I look at the blog page in Firefox for Mac, it disables the commenting system.  When I click the shield icon in the URL bar, I get the message, 'Firefox has blocked content that isn't secure.'

This seems to be an SSL issue.  Firefox sees it as an HTTPS page, but with insecure HTTP content.  See here for more info: mzl.la/1av5dpZ

So my question is, if Firefox sees the Disqus comments as insecure, how can I remedy this?  Do I need to write an override for DISQUS Comments?

Your help and advice will be most welcome,

Ian Bailey

Hello Ian,

Is your entire site on HTTPS? Can you send us a link please?

Hi Krikor,

Thank you for your very quick response.  Here’s a link to the page: armyofyou.com/


The entire site was on HTTPS, but I've since been experimenting with my settings:

- Joomla was set to Force SSL for Entire Site.

- I switched it to None yesterday.

- Nothing changed immediately, but today the shield icon and warning message had disappeared in Firefox for Mac and the comments system appeared to be working.

- When I switched back to Force SSL for Entire Site, the problem reappeared.

- In Joomla, I’ve now set Force SSL to Administrator Only.  So it should only be active on the backend of the site. The issue is still present, but hopefully it will have gone again by tomorrow.

- I’m going to leave Force SSL set to Administrator Only for now and only activate it on frontend pages as required.


Do you have any general advice regarding SSL?  Should I avoid using it on pages where Disqus is active?


Thanks,


Ian

As for using SSL the advice I can give you is to make all external script call with // instead of http://.
It will automatically change to https when needed.

This is a general rule and should be used throughout your template (eg. for jQuery loading in Joomla! 2.5).

Hi Krikor,

I also received similar advice from Disqus themselves.

It seems the JavaScript in the Disqus Comments extension is not as up-to-date as that now available directly from Disqus.  It was changed on March 6, 2013 to prevent the issue I've been experiencing: bit.ly/1apavzR

I've changed the following in Disqus Comments and the warning message in Firefox has gone away:

In this file: plugins/content/jw_disqus/jw_disqus.php

I changed line 219 to this: dsq.src = '//' + disqus_shortname + '.disqus.com/embed.js';

And in this file: plugins/system/jw_disqus/jw_disqus.php

I changed line 116 to this: s.src = '//' + disqus_shortname + '.disqus.com/count.js';


Thanks,


Ian