I've inherited a half-dozen or so wordpress sites. In a perfect world I would just put every one of them behind SSL throughout but I don't quite have enough IP addresses to go around and SNI will cut off windows XP users which is a non-starter.
The next best thing would be to at least centralize the admin functions behind a SSL-only site. So, what I'd like to do is something like:
- front-end site is http://www.example.com
- back-end sites end up at https://ssl.example-secured.com/wordpress/$SITE
There is a plugin which would let you force https for admin (http://wordpress.org/plugins/wordpress-https/) but it seems to require you stay in the same URL depth which won't work as I want to do this for a half-dozen or more wordpress sites and they can't all be at https://ssl.example.com/wp-admin
Any ideas how to make this happen?
I'll add we are moderately comfortable with hacking things in PHP, including the wordpress core, if need be. And we've got kooky CI / versioning schemes going on that make said hacks less painful.
While I understand the general "wp-way" would be to use multi-site here we really don't want to go down that path. Is there a way to do this that does not involve multi-site?