Tag Info

New answers tagged


It is probably possible, but if you do it the security impact is like not using ssl at all unless all you want to protect is your user and password and don't care much about protecting against actual hacking into the site. While user and password are sent only as part of the login form, an equivalent authentication information generated from them is ...


The right solution is checking the server TIME. If it is wrong SSL doesn't work fine.


I would recommend to define this constant in your wp-config.php to force HTTPS on admin: define('FORCE_SSL_ADMIN', true); Also, there is a function called is_admin() which could be helpful in your case. if ( is_admin() ) { $_SERVER['HTTPS'] = 'on'; } However, if you have a rule in your web server forcing all wp-admin and wp-login.php requests to ...


Just figured it out... It was the positioning of the define statement. I added the below above the /* That's all, stop editing! Happy blogging. */ line define('FORCE_SSL_ADMIN', true); define('FORCE_SSL_LOGIN', true); Thanks!

Top 50 recent answers are included