Update MaxMind Update Query URL to HTTPS

  • Resolved libertytalk

    (@libertytalk)


    1 year, 7 months ago

    Hello we received an email this afternoon from the team over at the MaxMind indicating that our WooCommerce store needs to update the query header for all geolocation requests from insecure HTTP to secure HTTPS.

    The totality of the site already runs through secure HTTPS protocol with forced redirection of any HTTP requests to HTTPS on our domain. However it appears there must be a hard-coded HTTP url within Woo Core that is still sending out requests via the HTTP insecure query??

    Looking over the WooCommerce/MaxMind integration there does not seem to be a manner in which to update this query URL from the WooCommerce Dashboard Settings.

    Will this be resolved in a future update to Woo Core or can someone please advise how to make this required change to the secure query channel?

    Thank you.

Viewing 9 replies - 1 through 9 (of 9 total)
  • Plugin Support Shameem R. a11n

    (@shameemreza)

    Hi @libertytalk

    While it’s true that the WooCommerce dashboard settings don’t provide an option to manually change this query URL, this doesn’t necessarily mean that your store is sending out insecure requests.

    The WooCommerce/MaxMind integration is designed to work over secure connections by default. This means that even if there is a hard-coded HTTP URL within the WooCommerce core, it should automatically be redirected to HTTPS, just like the rest of your site.

    However, to ensure that everything is functioning as expected, we would be happy to investigate this issue further for you. To do this, could you share a copy of your site’s System Status Report with us? You’ll find it at the top of the page under WooCommerce > Status > Get system report > Copy for support (after you scroll down a bit).

    In the meantime, you may also want to check your server configuration and .htaccess file to make sure that all requests are being properly redirected to HTTPS.

    Thank you for bringing this to our attention. Looking forward to helping you.

    Thread Starter libertytalk

    (@libertytalk)

    Hello Shameen, thank you for replying to our inquiry. Indeed the server via .htaccess redirects all requests to HTTPS.

    As for the status report, due to contractual obligations, posting such on a public forum is not feasible. Are you able to provide a WooCommerce/AUTOMATTiC email address where the status report may be sent for review?

    Saif

    (@babylon1999)

    Hello @libertytalk,

    If you are using a plugin from WooCommerce.com, you can contact us through email. You can find the email contact form in ‘My Profile’ > ‘Support‘.

    That said, your system status report doesn’t really contain any sensitive information other than the site URL, which you are more than welcome to move along with any other detail you’re not comfortable sharing before posting it directly here or via gist.github.com/.

    Look forward to hearing back from you.

    Thread Starter libertytalk

    (@libertytalk)

    Unfortunately, the link under ‘My Profile > Support’ only appears to allow for support for plugins related to WooCommerce. There does not seem to be an option to select WooCommerce Core for a support ticket.

    Hi there @libertytalk ??

    However it appears there must be a hard-coded HTTP url within Woo Core that is still sending out requests via the HTTP insecure query??

    Can you please share a screenshot of what you see at that screen? That will help us understand the issue further. Here’s how to make a screenshot:

    https://wordpress.com/support/make-a-screenshot/

    As for the status report, due to contractual obligations, posting such on a public forum is not feasible.

    Feel free to redact the site’s URL. Once you’ve done that, you can paste it here or into our https://Quickforget.com service and send that secret link here.

    I hope this is helpful! Once I hear back from you, I will be happy to investigate this further.

    Thread Starter libertytalk

    (@libertytalk)

    Unfortunately there is no screenshot as there is no option to edit the geolocation URL anywhere within the WooCommerce dashboard. It is as far as I can tell hard-coded into WooCommerce core.

    Trying to contact WooCommerce directly to inform them of this issues is also impossible as you can only reach out as it relates to a specific plugin.

    https://quickforget.com/s/97dafddec9a84fa95524dab636d86b5201b261228c3692a3

    Plugin Support Raif D. a11n

    (@rdeari)

    Hi @libertytalk!

    Unfortunately, the link under ‘My Profile > Support’ only appears to allow for support for plugins related to WooCommerce.

    Can you please select one (any of the options) and create a ticket? We will handle the next steps on our end.

    Thank you!
    We will be standing by for your reply!

    Thread Starter libertytalk

    (@libertytalk)

    Hi Raif,

    Thank you for the reply, will go open a ticket upon submission of this reply.

    Plugin Support Raif D. a11n

    (@rdeari)

    Hi @libertytalk!

    Thank you for the reply, will go open a ticket upon submission of this reply.

    Thank you! Someone will be with you soon!

    Cheers!

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘Update MaxMind Update Query URL to HTTPS’ is closed to new replies.