The tag has no usage guidance.

learn more… | top users | synonyms

9
votes
3answers
941 views

Is it save to use sslverify => true for with wp_remote_get/wp_remote_post

I'm normally using this arguments with wp_remote_get and wp_remote_post array( 'sslverify' => false ); to prevent errors. For security reasons I would like to set it to true (or remove it ...
8
votes
2answers
2k views

Anyone figured out how to use WordPress MultiSite with Domain Mapping & SSL?

I've been looking all over to find a solution for SSL with WordPress MultiSite and Domain Mapping. Ideally, I'd like to purchase an SSL cert for each domain (or potentially a wildcard cert) anyone ...
6
votes
5answers
2k views

How can I make an Ajax login form work with FORCE_SSL_ADMIN enabled?

I'm working on a site that requires an https secured admin area and a secure front-end area as well where private information will be shown. My preference for user login is an Ajax-enabled widget that ...
6
votes
2answers
7k views

SSL redirect loop using Wordpress HTTPS Plugin

I'm using Wordpress in a NginX server proxying to an apache server which serves the pages. Recently we wanted to force the use of SSL at least in the Admin section, so we installed the Wordpress HTTPS ...
6
votes
3answers
9k views

SSL Breaks Wordpress CSS

We purchased an SSL certificat from network solutions (would never recommend them to my worst enemy, btw). Apparently it's activated... did a few checks that says it's activated for our domain. But ...
5
votes
4answers
5k views

Use a different domain for SSL

long time lurker - first time poster. A client of mine has a website developed in CakePHP, and a wordpress blog installed in the /blog/ directory. Let's say the url of the main domain is ...
5
votes
1answer
3k views

Switching MultiSite installation from HTTP to HTTPS

I installed MultiSite with the URL set as http://example.com, but now I want to force all requests to go over HTTPS, so I'm trying to change the URL to be https://example.com. I've gone through the ...
5
votes
6answers
230 views

Share same domain for wp-admin but for different website

I have site like http://www.foo.com http://www.bar.com And I've a wildcard SSL cert *.example.com, instead of buying two SSL certs for the above two domains, can I re-use my existing wildcard SSL ...
5
votes
3answers
349 views

How to use Wordpress multisite with mixed HTTP and HTTPS sites?

I have a multi-wordpress installation (3.x) with 5 sites and only one of them is using SSL. All of these are running on their own domain, and the http://ssldomain.com forwards to ...
4
votes
5answers
8k views

Is there a way to force ssl on certain pages

I want to force a secure connection on some of my pages (ones with forms), but I don't want the whole site to work with ssl (slows it down) Is there a way to configure specific pages to require ssl?
4
votes
2answers
2k views

Howto force SSL for all requests?

Is there a way to force SSL for all requests? Much like the option to use admin ssl, but for all requests, including the ones who are not logged in.
4
votes
2answers
708 views

How to get the post editor and media library to respect HTTPS administration mode?

I have a site with FORCE_SSL_ADMIN turned on. When I'm editing a post with an embedded image, or when I'm viewing images through the media library, they are loaded using the http:// protocol rather ...
4
votes
1answer
376 views

htaccess rewrite conflict with wordpress rules and ssl

this one has me buggered- I have the below htaccess rule to redirect ssl to non-ssl pages. this works fine, except I'd like to exclude certain wordpress requests from this rule- for example, ...
4
votes
1answer
228 views

Run WordPress frontend and backend in different domains

I want to run my WP frontend as www.example.com and my backend (i.e. wp-admin) as user1.example.org, is it possible? The reason is I want to host lot of sites in a single server which has only 1 IP ...
4
votes
1answer
179 views

Multisite Domain Mapping with SSL

I've done some searching but couldn't find this issue elsewhere, apologies if this has already been discussed elsewhere. I've set up a Multisite install; and am trying to set up domain mapping for ...
3
votes
1answer
645 views

SSL wildcard issue for wp multisite subdomains

I have a problem with wildcard SSL and my host says they are unable to get it to work how I thought it would work. I have bought a wildcard SSL certificate thinking that it should work nicely with ...
3
votes
2answers
1k views

Protocol neutral URLS with wp_enqueue_script (SSL issues)?

How do I use wp_enqueue_script so that I get protocol neutral URLs? Here is how I'm currently using it: <?php wp_enqueue_script('name', get_bloginfo('template_directory'). '/js/name.pack.js'); ...
3
votes
1answer
167 views

How to redirect url requests to https? [closed]

I've searched far and wide for a solution to this and I am sure it's simple but I simply couldn't find a solution. This is the regular wordpress redirect code: <IfModule mod_rewrite.c> ...
3
votes
1answer
281 views

After updating site to use SSL all images in posts point to http://

I recently upgrade my site to use SSL through a reverse proxy. I have changed the WordPress address and site address in the Settings menu and the main page loads just fine: ...
3
votes
3answers
2k views

Force home page to be https?

I have a SSL certificate and https plugin which both work fine along with changing the Settings in the Wordpress menu to https but I have to manually enter 'https' to see the Secure version, is there ...
3
votes
2answers
5k views

bloginfo() and get_template_directory_uri() with SSL?

I have a Wordpress theme I'm attempting to put on an SSL-only website. There is no non-SSL version of the site. The Wordpress theme uses various functions like bloginfo('pingback_url'), ...
2
votes
7answers
3k views

Multisite database upgrade SSL error

I have upgraded my Multisite setup WordPress to 3.6.1. And after that, when I do Network Upgrade > Database Upgrade it's showing: Warning! Problem updating http://www.example.com/site1. Your ...
2
votes
1answer
6k views

Disable all https in WordPress

Recently I moved my WordPress to another server (MediaTemple), but now my admin is redirecting for HTTPS all the time, but I don't have SSL enabled on my domain, so it just keep warning that is not ...
2
votes
1answer
39 views

Weird issue with database migration and SSL links

I want to move my database to my another mirror server (for testing & stuff). My original one is using SSL and I am forcing it to do so. When I migrate with DB Migrate plugin, the non-ssl server ...
2
votes
2answers
10k views

Force HTTPS using .htaccess - stuck in redirect loop

My Wordpress website is located at example.com/wordpress and I need everything inside to be accessible only using SSL. I've created a .htaccess rule that redirects http -> https: RewriteEngine On ...
2
votes
1answer
1k views

Gravity Forms not loading under https, jQuery is not defined

I am using Gravity Forms on my Wordpress site, and so far so good. The problem is I have made the page secure (https/SSL), and this is making the form not to work. It looks like the issue is how the ...
2
votes
0answers
46 views

SSL breaks customizer: page isn't returned from ajax

I have a WordPress install using a Comodo SSL certificate. I have the WordPress HTTPS plugin installed and I'm using the AZ theme, and the admin is set to load over HTTPS. So far so good. On the ...
2
votes
0answers
90 views

AJAX requests broken due to HTTPS for wp-admin

I have my wp-admin section forced to HTTPS via a plugin. I also have specific pages that are using https on the frontend (login, billing, etc.) I seem to be having an issue with HTTP pages using AJAX ...
2
votes
1answer
310 views

SSL certificate for the host could not be verified

I'm getting this error in a log file created by WooCommerce "The SSL certificate for the host could not be verified." The error is being generated by WordPress' file /wp-includes/class-http.php ...
1
vote
1answer
354 views

Remove the http protocol from images

I've been banging my head on the wall trying to filter my posts to remove the http: protocol from the img src and I think I may have found a solution. Does anybody see anything wrong with this ...
1
vote
2answers
814 views

How do I map a subdomain in wordpress to the primary domain in a multisite setup?

We have a multisite setup, the primary domain needs to have domain.com, www.domain.com and secure.domain.com mapped in wordpress so the primary site's content loads on them. The problem we are facing ...
1
vote
2answers
44 views

Show widget when not using SSL

My wordpress site supports http and https. What I want to do is to add a widget when surfing over http that says something like "Surf this site secure" to show the visitor that I also have a secured ...
1
vote
3answers
337 views

Images causing Mixed Content with SSL

I'm trying to use SSL on my login pages but I have some images on this page and it also looks like it's loading a google font api so it's not saying the page is secure. I tried to force SSL using: ...
1
vote
2answers
74 views

CNAME site attempts to load files over HTTP instead of HTTPS

The main site https://www.ptacunits.com loads fine. We have a CNAME pointing from the above domain to the following domain, https://www.ptacfactoryparts.com however, the page source shows HTTP ...
1
vote
1answer
566 views

WordPress wp-admin https redirect loop

I am using nginx as my webserver and i have edited the configuration file to point to https, so i change the WordPress url settings to https and also added the WordPress force ssl admin code to my ...
1
vote
1answer
113 views

Wordpress generated links - menus and home_url() - not using https despite settings

I have just started working with a WordPress 3.9.2 site which has the WordPress HTTPS module active and functioning. Plugins, CSS, images, are loaded over https. In General Settings the WordPress ...
1
vote
1answer
1k views

SSL setup: wp-login css doesn't load over httpS

I have a multisite setup, using SSL. Everything works fine. visitors are getting all there content over https. There is not a single url without httpS in my page source. (inclusing urls to css,js ...
1
vote
2answers
543 views

How to server wordpress from SSL and non-SSL URLs

I have a standard wordpress installation with no plugins residing in /var/www/blog on my root server. It uses an Apache2, mod_rewrite, mod_ssl and that is configured just fine and works perfectly for ...
1
vote
1answer
1k views

“Upgrade Network” error: stuck with SSL certificate verification

When trying to update one Network/MU install, I got the following error. Warning! Problem updating https://subdomain-A.example.com. Your server may not be able to connect to sites running on it. ...
1
vote
1answer
196 views

Force Load https Wordpress Plugins

Having a mixed security issue that is affecting functionality in browsers because some of my plugins are loading with http instead of https. I'm running under a multisite setup. Thanks! This is what ...
1
vote
2answers
141 views

WordPress Dashboards: slowness and timeouts

On a single server, we have a number of single-site WordPress installations (which have been around for many years and have worked fine 'til now) and one newer multi-site installation that has been ...
1
vote
1answer
8 views

Disabling HTTPS redirection for migration

I migrated a WordPress 4.3 site from Register.com to MediaTemple today and found that the forced SSL is causing issues for the staging URL. In order to try again I have (on the live Register.com ...
1
vote
1answer
128 views

In WP versions >= 4.0, is FORCE_SSL_LOGIN forcing HTTPS for the entire admin session?

If I'm not mistaken, I recall being able to use FORCE_SSL_LOGIN to secure just the WP login process and not the entire admin session, which is the purpose of FORCE_SSL_ADMIN. Some browsers would keep ...
1
vote
1answer
344 views

Enable Full SSL for Wordpress

I've enabled SSL for my main domain but i want to enable it fully for my wordpress website which is located in a subfolder. when i say fully i mean in admin area and the website itself and without any ...
1
vote
1answer
96 views

un-loading https

I'm using this code in functions.php to load https on my events-manager pages: function my_em_force_ssl( $template ) { if ( ! is_ssl() && em_is_event_page() ) { wp_redirect( ...
1
vote
2answers
664 views

How can I make uploaded images in the editor load with HTTPS?

I have the admin section of my site using HTTPS. This works pretty well except that the images inside the TinyMCE editor (the post and page rich text editor) load with http instead of https and so I ...
1
vote
2answers
1k views

How to use a Wildcard SSL with WordPress Network?

I am using WordPress Network to have a network of sites, but as each site needs to be on Facebook they now need to be SSL secured. (Note: not just the admin, but the whole front-facing site) I ...
1
vote
2answers
474 views

How can I force users to a particular subdomain to log in for MU (Multisite)?

I have a Multi-Site installation of Wordpress, with multiple subdomains, but only one of the subdomains has an SSL certificate. The domains are such: www.example.com blog1.example.com ...
1
vote
1answer
922 views

Using shared SSL for login/admin

I want to use SSL for login/admin. However, since I'm using a shared server, my web host only provides a shared SSL. That means instead of https://www.regular-domain.com I have to go to ...
1
vote
0answers
17 views

Conflict with Force SSL and Rewrite Rules

A site I'm working on has two security-related requirements which I've been unsuccessful in solving simultaneously. I can satisfy each requirement BY ITSELF, but I'm running into problems satisfying ...