# 如何禁用强制HTTPS的安全检查或停用这些邮件？

**URL:** <https://meta.discourse.org/t/how-to-disable-security-check-for-force-https-or-disable-these-emails/92067>\
**Category:** Support\
**Created:** [2018年七月11日 09:07 UTC](https://meta.discourse.org/t/how-to-disable-security-check-for-force-https-or-disable-these-emails/92067 "2018-07-11T09:07:54Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ivan\_Rapekas](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ivan_rapekas/32/248924_2.png) [@Ivan\_Rapekas](https://meta.discourse.org/u/Ivan_Rapekas)\
**Post date:** [2018年七月11日 09:07 UTC](https://meta.discourse.org/t/how-to-disable-security-check-for-force-https-or-disable-these-emails/92067/1 "2018-07-11T09:07:54Z")

</div>

Hi,

my forum installed in subfolder 🤗. When I enable `force https` the lightbox for pictures does not work. The only one workaround I found is to disable `force https` option. I checked that 99% of traffic is encrypted except \<1% of external pictures. I found this is ok for us.

After upgrade to 2.0.1 forum admins began receive emails with a warning about `force https` disabled on the forum.

Is any way to stop such security checks or send certain emails to admins? I cannot turn on this option due to compromise between security and usability.

---

<div class="post-metadata">

**Author:** ![vinothkannans](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/vinothkannans/32/86465_2.png) [@vinothkannans](https://meta.discourse.org/u/vinothkannans)\
**Post date:** [2018年七月11日 09:32 UTC](https://meta.discourse.org/t/how-to-disable-security-check-for-force-https-or-disable-these-emails/92067/2 "2018-07-11T09:32:13Z")

</div>

You could override it in a custom plugin by setting `check_force_https: false` in below method

> <https://github.com/discourse/discourse/blob/6332d5040d18ee682c7e417f8131df77b51861e3/app/controllers/admin/dashboard_controller.rb#L10-L12>

---

<div class="post-metadata">

**Author:** ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)\
**Post date:** [2018年七月11日 10:21 UTC](https://meta.discourse.org/t/how-to-disable-security-check-for-force-https-or-disable-these-emails/92067/3 "2018-07-11T10:21:36Z")

</div>

Hmm, wouldn’t we be seeing a similar problem with our hosted subfolder installs if this was the case?

> [@Ivan\_Rapekas](#):
>
> When I enable `force https` the lightbox for pictures does not work.

Can you clarify what this means? What do you mean “does not work”, specifically?

---

<div class="post-metadata">

**Author:** ![Ivan\_Rapekas](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ivan_rapekas/32/248924_2.png) [@Ivan\_Rapekas](https://meta.discourse.org/u/Ivan_Rapekas)\
**Post date:** [2018年七月11日 10:29 UTC](https://meta.discourse.org/t/how-to-disable-security-check-for-force-https-or-disable-these-emails/92067/4 "2018-07-11T10:29:08Z")

</div>

Our problem:  
when force https is enabled, then lightbox black frame, which is shown on mouse hover, totally disappeared from any picture in forum posts.

For example, you cannot zoom the image to the screen. You are able to see the picture in original size by right-click the picture and open it in new browser tab.

Once you disable force https, the problem with pictures should go away.

---

<div class="post-metadata">

**Author:** ![Ivan\_Rapekas](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/ivan_rapekas/32/248924_2.png) [@Ivan\_Rapekas](https://meta.discourse.org/u/Ivan_Rapekas)\
**Post date:** [2018年七月11日 12:31 UTC](https://meta.discourse.org/t/how-to-disable-security-check-for-force-https-or-disable-these-emails/92067/5 "2018-07-11T12:31:34Z")

</div>

> [@vinothkannans](#):
>
> You could override it in a custom plugin by setting `check_force_https: false` in below method

Thank you, @vinothkannans! I will take note of this but I found this too hard for me at this time 🙂

---

<div class="post-metadata">

**Author:** ![system](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/system/32/443519_2.png) [@system](https://meta.discourse.org/u/system)\
**Post date:** [2018年八月10日 12:31 UTC](https://meta.discourse.org/t/how-to-disable-security-check-for-force-https-or-disable-these-emails/92067/6 "2018-08-10T12:31:37Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.