CiviCRM Community Forums (archive)

It is the holiday here in the UK so I took the opportunity to change the configuration of CiviCRM on my client's server. I used to serve CiviCRM from a subdomain however, with the questions recently asked by my client about SSL, I migrated the installation to a subfolder off the main site to get the https functionality.

Everything works okay, with a redirect setup for tracking links on emails and old hyperlinks.

While I was testing the https configuration using CiviEvent (using Google Chrome) I became aware of a security warning due to the insecure content displayed on the Event Information page. The Google Map identifying the event location was delivered using http rather than https. I understand that, with the Google API v3, developers can display a Google Map over https preventing the warnings about insecure content.

I investigated CiviCRM's base code in:
.../civicrm/templates/CRM/Contact/Form/Task/Map/Google.tpland discovered that the Google API v2 is in use, so preventing the delivery of https/ssl maps.

Has anyone had any similar problems or success with modifying/replacing the CiviCRM code to use the Google API v3 instead of v2? Or is there a workaround?

I would be willing to step into the code to modify/create my own mapping code, hopefully after some pointers/advice from the CiviCRM team.

Thanks

Let me think about this, it'll be a good first project...

I'll jump on IRC later (GMT:1400)

Don't want to put pressure on you and scare you, take your time, we can wait.

Read today that personal challenges are ideally taken on sat 18th. But I'm sure the 19th would be fine as well, again, no pressure

Would be great you write a case study about what you're doing with civi
X+

I dont think so. A patch to upgrade google maps to v3 would be great

lobo

i think all the google mapping code is here:

templates/CRM/Contact/Form/Task/Map/Google.tpl


lobo

v4.1 has been upgraded to use google api v3

http://issues.civicrm.org/jira/browse/CRM-8032

lobo

Actually, no. The usage of Google API V3 does NOT resolve the issue if you're using https on your site.

I found after upgrading to 4.1.1, that my site was STILL making calls to http for Google Maps, not https. Internet Explorer confirmed as much by denying me access to see the maps for events.

To fix this, you have to make the following change. In your Civicrm directory, follow this structure:

civicrm > templates > CRM > Contact > Form > Task > Map > Google.tpl


Save a copy before editing this one. Then, change Line 35 from "<script src="http://maps.googleapis.com"" to "<script src="https://maps.googleapis.com"". Save, replace, flush caches, and refresh the page.

And this will have to be done every time you update CiviCRM unless it's fixed in an update.

xavier, I can confirm that your syntax works for https. Cannot check for http.

Great that the API v3 was used for this; thanks Guys!

Noticed something else though:

On an Event Info page, the social networking links to Twitter and Facebook are referencing http links and not https. This produces the usual errors in FF, IE and Chrome re: unsecure content. I am currently looking to see if I can correct this.