(01-19-2017, 12:44 AM)TGates Wrote: Fixed it... You had for your 'SSL Hardening':
This blocks iframes. Commented it out and it works just fine now...Code:Header always set X-Frame-Options DENY
Problem solved!
Well no kidding. Can you elaborate on that - that could only have come from what I cut and pasted from the Let'sEncrypt instructions as that is the only thing that was modified after the install.
That would be something to include somewhere - and I wonder why it does not break the installs in VM's???
Where is "'SSL Hardening'" even set at?
(01-19-2017, 03:31 AM)worksmarter Wrote: Well no kidding. Can you elaborate on that - that could only have come from what I cut and pasted from the Let'sEncrypt instructions as that is the only thing that was modified after the install.
That would be something to include somewhere - and I wonder why it does not break the installs in VM's???
Where is "'SSL Hardening'" even set at?
OK, I know how that got in there. It is included in the instructions on how to get an A+ sercurity rating on your SSL certificate. I would say that procedure needs modified for anyone that is going to install Sentastico. Thanks for finding that - that had not occurred to me...
Everyone makes mistakes, but to truly screw up it takes the root password!