Fix HTTPS/mixed content; make config env-drivenHEADmaster2026

- Replace hardcoded dump.fm URLs with host/scheme config\n- Add optional passwordless login flow\n- Update templates/static assets to avoid blocked HTTP resources\n- Ignore local uploads/SQL dumps

1 files changed, 4 insertions, 4 deletions

diff --git a/template/rooms/mgmt.st b/template/rooms/mgmt.st
index afff5fc..793cb7e 100755
--- a/template/rooms/mgmt.st
+++ b/template/rooms/mgmt.st
@@ -19,18 +19,18 @@
 <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
 <meta name="keywords" content="dump.fm,mgmt,okfocus">
 <meta name="description" content="dump.fm - Talk with pictures!" />
-<script type="text/javascript" src="http://ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js"></script>
+<script type="text/javascript" src="/static/js/jquery-1.4.2.min.js?v=20260126"></script>
 <script type="text/javascript" src="$domain$/static/js/jquery-ui-1.8.effects.min.js"></script>
 <script type="text/javascript" src="$domain$/static/js/pichat.js"></script>
 <link rel="stylesheet" type="text/css" href="$domain$/static/css/mgmt.css">
 <script>Domain = "$domain$"</script>
 
 $if(isadmin)$
-<link rel="stylesheet" href="http://ajax.googleapis.com/ajax/libs/jqueryui/1.8/themes/ui-lightness/jquery-ui.css" 
+<link rel="stylesheet" href="https://ajax.googleapis.com/ajax/libs/jqueryui/1.8/themes/ui-lightness/jquery-ui.css" 
       type="text/css" media="all" />
 <link rel="stylesheet" href="$domain$/static/css/admin.css"
       type="text/css" media="all" />
-<script src="http://ajax.googleapis.com/ajax/libs/jqueryui/1.8.0/jquery-ui.min.js"
+<script src="https://ajax.googleapis.com/ajax/libs/jqueryui/1.8.0/jquery-ui.min.js"
         type="text/javascript"></script>
 <script src="$domain$/static/js/admin.js" type="text/javascript"></script>
 $endif$
@@ -39,7 +39,7 @@ $endif$
       
 <!--[if IE]>
 <script>
-window.location = "http://hump.fm/error/ie";
+window.location = "/error/ie";
 </script>
 <![endif]-->