The tag has no usage guidance.

learn more… | top users | synonyms

1
vote
1answer
18 views

Mixed Content warnings google fonts

I installed a ssl certificate to my blog and moved everything from http to https. But I still get duplicate content warnings that the google fonts are loaded via http. I can't seem to find where I can ...
0
votes
1answer
18 views

Featured image on post edit page not loading over HTTPS

Our site uses TLS and to the best of my ability I've forced TLS everywhere. I've defined FORCE_SSL_ADMIN to be true and also tried the following filter which I've borrowed from the plugin SSL Insecure ...
1
vote
1answer
23 views

WordPress is Inserting images into Post as HTTP and not HTTPS

I've logged into my site in HTTPS and I'm editing on a specific post. I've dragged an image to the edit window and am now inserting an image. The thing is WordPress is inserting the image as HTTP ...
1
vote
0answers
17 views

Strange redirection issues on wordpress from ssl with padlock to ssl without padlock

First time posting here so hopefully Ive got the right question in the right place. I recently moved servers and then decided to add a ssl certificate. Since the move traffic has plummeted. Looking ...
0
votes
1answer
29 views

Rewrite old post images to https

I moved my site from http to https. I changed all template content to ssl, but the images in old posts are still served with http. How to catch all images and rewrite them to ssl with Nginx?
0
votes
1answer
46 views

Force SSL on a single page which is used as iFrame

I have one WordPress page that only contains a shortcode for a slider and is used by other websites as an iFrame. I need to force SSL one this one single page, but whatever I try, it is not being ...
1
vote
0answers
10 views

Locked out of admin and some pictures don't show after failed SSL installation

in a bit of a pickle here as I'm not sure what has caused the issue so hopefully somebody here can help me. So I purchased the SSL certificate and but the folder with the files in onto my website. I ...
2
votes
2answers
16 views

Is Partial SSL Possible? ( multisite )

I have recently been invited to the letsencrypt SSL beta, and have now spotted a potential problem. My main site tomjn.com is a multisite, and I have the opportunity to add certificates for tomjn.com ...
0
votes
0answers
12 views

SSL doesn't deliver parts of Wordpress Administration Module

I have a very strange problem in my website. Let me figure it out: Firstly I have an SSL website https://example.com when I log in into /wp-admin i can't see some features like my Media Library or my ...
0
votes
0answers
12 views

Multi Domain SSL Certificates Redirecting

I have a multi domain SSL certificate installed on my server and a dedicated IP address. In public_html I have a multi site install running flawlessly with https (site A). My problem is in a secondary ...
1
vote
1answer
30 views

Jetpack “Connect to Wordpress” serving insecure content under HTTPS

I set up my site to use SSL and was auditing for insecure content and by process of elimination I found that the plugin serving insecure content is infact Jetpack, and only when connected to Wordpress ...
1
vote
1answer
36 views

HTTP sitewide, except for: wp-admin, and 2 custom directories

I've tested various snippets in order to achieve the following, but with no success. I don't want to set the whole site to HTTPS at the moment, only 2 specific pages: .org.uk/directoryA/directoryB/ ...
1
vote
1answer
131 views

wp-admin redirect loop with ssl

I currently have a site running on HTTPS with an SSL plugin activated Website: https://www.greenwichsentinel.com SSL Plugin: Really Simple SSL Wordpress Version: 4.0.7 (Multisite) Everything seem ...
0
votes
1answer
45 views

WP Core hard coded to use http://www.w3.org/1999/xhtml not HTTPS

I've searched here and the WP Codex but haven't found anything. I have recently added an SSL Cert to a client site. The front end is fine and there are no insecure elements. However, the admin ...
1
vote
1answer
26 views

Disabling HTTPS redirection for migration

I migrated a WordPress 4.3 site from Register.com to MediaTemple today and found that the forced SSL is causing issues for the staging URL. In order to try again I have (on the live Register.com ...
0
votes
0answers
301 views

Sending SMTP mail using a server with self-signed SSL

The problem I need to solve I have a web server in a network where the port 25 is blocked for outgoing traffic, and in order to send emails it is mandatory to obtain an account and use ...
1
vote
0answers
91 views

Permalinks 404 error with HTTPS host

My new permalinks continue displaying a 404 error on my site even after adding the AllowOverride and Rewrite modules parameters. Here is my default-ssl.conf file : <IfModule mod_ssl.c> ...
0
votes
1answer
51 views

I would like to add ssl certificate to my already existing wordpress site

I have site named as www.splessons.com and it has 500 articles and now i would like to add ssl certificate to it. My doubt is does this effect to my old articles. Doubts: 1) Does it effects to my ...
1
vote
0answers
320 views

Too many redirects after added SSL redirect on port 80 virtual host

I have 2 virtual host for my wordpress blog. One handles the http port 80 request and other handles port 443 https requests. I have added the following in my virtual host for port 80 to redirect all ...
0
votes
1answer
28 views

Unable to get Wordpress's apply_filters('site_url') to return a https scheme

I am in the middle of migrating a Wordpress site to being entirely https://, but I am having trouble with the login page. The login page itself is loading with the https:// scheme, but the form ...
0
votes
0answers
14 views

WordPress running on AWS behind a load balancer forces HTTPS links [duplicate]

Something weird happened to our website. After migrating to AWS, the setup is as follows: 1. 2 web nodes 2. 1 load balancer 3. S3 for content 4. RDS with a few DB instances Not sure what happened ...
0
votes
1answer
240 views

Core update of 4.2.3 changes all link to https [duplicate]

Latest update of wp 4.2.3 applied to my two to three installation automatically. After that my all links starting with https due to that sites are not opening properly Can anyone know what the ...
1
vote
1answer
194 views

Allow non-SSL pages to use https or Force non-SSL pages to http?

I have a basic question which I did not see previously asked here. I think it belongs here because of the fact that it deals with attempting to secure wordpress. Which is more secure across requests? ...
1
vote
1answer
40 views

Website access with http and https

I have a WordPress website which is hosted on an Apache Xampp Server, Windows 2012 Server R2. I have put SSL on it and I have added https://www.example.com as the siteurl in Settings. I can access ...
0
votes
0answers
64 views

wp woocommerce forcing https [duplicate]

When woocommerce plugin is enabled, it brakes the website and also wp-admin because all request is in https, but if turned off site will back to normal. I tried to delete the WC options in wp_option ...
1
vote
0answers
23 views

Conflict with Force SSL and Rewrite Rules

A site I'm working on has two security-related requirements which I've been unsuccessful in solving simultaneously. I can satisfy each requirement BY ITSELF, but I'm running into problems satisfying ...
1
vote
0answers
73 views

Images loading over http instead of https

I am new to wordpress and recently launched my blog on self-hosted version of wordpress. Everything is working fine except some images are loading over http resulting in insecure contents warning by ...
3
votes
0answers
69 views

SSL breaks customizer: page isn't returned from ajax

I have a WordPress install using a Comodo SSL certificate. I have the WordPress HTTPS plugin installed and I'm using the AZ theme, and the admin is set to load over HTTPS. So far so good. On the ...
1
vote
1answer
205 views

How to modify the .htaccess to force ssl on login and admin pages

I have the following code to force ssl on the login and admin pages via the .htaccess on a the domain example.com <IfModule mod_rewrite.c> RewriteEngine On RewriteCond %{REQUEST_URI} ...
1
vote
0answers
209 views

How to force non SSL on just one page?

How do I force only one page on my WordPress blog to NOT use SSL?
1
vote
1answer
38 views

SSL issues with WordPress site

So, I have a WordPress site that has SSL certificate installed. What I need is to disable SSL on some pages (to make a video ad script to work). But, the problem I am having is, If an user logs in to ...
0
votes
0answers
52 views

Wordpress fails secure connection to wordpress.org (localhost)

I'm using Wordpress on my local machine with Vagrant and a Scotchbox (https://box.scotch.io/). It's working fine except when visiting parts of the admin that tries to connect to wordpress.org, like ...
1
vote
2answers
119 views

CNAME site attempts to load files over HTTP instead of HTTPS

The main site https://www.ptacunits.com loads fine. We have a CNAME pointing from the above domain to the following domain, https://www.ptacfactoryparts.com however, the page source shows HTTP ...
4
votes
1answer
483 views

Multisite Domain Mapping with SSL

I've done some searching but couldn't find this issue elsewhere, apologies if this has already been discussed elsewhere. I've set up a Multisite install; and am trying to set up domain mapping for ...
2
votes
3answers
1k views

Images causing Mixed Content with SSL

I'm trying to use SSL on my login pages but I have some images on this page and it also looks like it's loading a google font api so it's not saying the page is secure. I tried to force SSL using: ...
0
votes
0answers
38 views

Wordpress logs out on protocol switch

WordPress logs out users any time their protocol switches between HTTPS and HTTP. This is a real problem in a commerce environment where checkout forces SSL. I've run into this a handful of time over ...
1
vote
0answers
136 views

How to properly force https and www on multisite

I have a wordpress multisite in network mode via wp multi network plugin. I've been trying to use .htaccess rules to force all urls to be https://www. eg: https://domain.com to ...
3
votes
2answers
157 views

AJAX requests broken due to HTTPS for wp-admin

I have my wp-admin section forced to HTTPS via a plugin. I also have specific pages that are using https on the frontend (login, billing, etc.) I seem to be having an issue with HTTP pages using AJAX ...
1
vote
1answer
36 views

Need ideas for HTTPS multiple domain solution

I'm developing a WordPress site that runs on multiple domains (not WordPress MU). The two domains are served from the same codebase and I have written a plugin that successfully switches themes based ...
-1
votes
1answer
399 views

SSL/HTTPS Redirect Loop

I can't seem to make certain pages secure and I think I've tried everything possible. .htaccess redirect iTheme Security plugin Wordpress HTTPS plugin Changing site url to https:// For some ...
1
vote
0answers
134 views

ReDirect subfolder link to another sub-folder and force SSL

My wordpress is installed in a subfolder, for example: test, so my urls look like http://example.com/test/product/buy-product-a/ etc.. Now I have installed another wordpress in subfolder, for ...
2
votes
1answer
230 views

In WP versions >= 4.0, is FORCE_SSL_LOGIN forcing HTTPS for the entire admin session?

If I'm not mistaken, I recall being able to use FORCE_SSL_LOGIN to secure just the WP login process and not the entire admin session, which is the purpose of FORCE_SSL_ADMIN. Some browsers would keep ...
3
votes
1answer
935 views

SSL wildcard issue for wp multisite subdomains

I have a problem with wildcard SSL and my host says they are unable to get it to work how I thought it would work. I have bought a wildcard SSL certificate thinking that it should work nicely with ...
2
votes
1answer
643 views

Remove the http protocol from images

I've been banging my head on the wall trying to filter my posts to remove the http: protocol from the img src and I think I may have found a solution. Does anybody see anything wrong with this ...
0
votes
1answer
34 views

How to protect login via SSL but not the rest of the dashboard

Is it possible to have a site's login pages protected via SSL but then have it revert back to http:// for the dashboard pages? I am finding that https:// in the dashboard slows down my experience.
1
vote
1answer
577 views

Admin-Ajax.php, SSL, Non-SSL

I have a WordPress site behind a reverse proxy. The site is over http, except the wp-admin area, which is under https. We don't have BasicAuth or anything running on top of the admin area. One of our ...
0
votes
1answer
586 views

FORCE_SSL_ADMIN not working

Any ideas why define('FORCE_SSL_ADMIN', true); wouldn't work? I'm not getting any errors at all, but a http request to example.com/wp-admin isn't redirecting to https
5
votes
1answer
2k views

WordPress wp-admin https redirect loop

I am using nginx as my webserver and i have edited the configuration file to point to https, so i change the WordPress url settings to https and also added the WordPress force ssl admin code to my ...
0
votes
1answer
840 views

HTTPS to HTTP rewrite rules not working as expected

I'm struggling at getting these rewrite rules to work and was wondering if someone can point out my error(s). The following should redirect a user to HTTPS if they are at the login page or in the ...
9
votes
3answers
2k views

Is it save to use sslverify => true for with wp_remote_get/wp_remote_post

I'm normally using this arguments with wp_remote_get and wp_remote_post array( 'sslverify' => false ); to prevent errors. For security reasons I would like to set it to true (or remove it ...