BuddyPress.org/blog comment submit button goes to blank /wp-comments-post.php

[mercime]

Visitor (not logged in) clicking on comment submit button is redirected to blank page ​https://buddypress.org/wp-comments-post.php

When user is logged in and clicks on the comment submit button, warning shows up :

Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.
Are you sure you want to continue sending this information?

And when you proceed, it goes to the same blank page ​https://buddypress.org/wp-comments-post.php

[netweb]

Using Chrome on a Mac:

Mixed Content: The page at 'https://buddypress.org/2015/05/2015-buddypress-survey-results/' was loaded over a secure connection, but contains a form which targets an insecure endpoint 'http://buddypress.org/wp-comments-post.php'. This endpoint should be made available over a secure connection.

Source: /buddypress.org/public_html/wp-content/themes/bb-base/comments.php#L38

 <form action="<?php echo get_option('siteurl'); ?>/wp-comments-post.php" method="post" id="commentform">

I don't think we actually changed the siteurl to HTTPS, systems have redirected HTTP to HTTPS for the bb's

Likely to be other instances of site_url and home_url that may be affected, e.g. r1468

Switching from get_option('siteurl'); to site_url( '/wp-comments-post.php', 'https' ); and overriding the protocol is one way to fix this, the other is to update the home and site URL's in the BP network

[DJPaul]

siteurl is HTTP at the moment, but I can't change it. Someone with a sandbox needs to do it.

[dd32]

using site_url() instead of a direct get_option() should also fix that (without the scheme parameter)

[johnjamesjacoby]

In 1645:

BuddyPress.org: use site_url() in comments.php.

Fixes mixed content issues when posting comments.

Fixes #1024. Props netweb, dd32.