Force SSL 100%?

Question

In order to completely move from HTTP to HTTPS, is it best practise to export the database and replace all http:// links with https://?

I did that and also made sure that 100% of the links in the database are https, which is the case now. But still I am having issues:

1. Some links I find in my source code (actually the ones that come from wordpress functions, like wp_nav_menu()) are still returning http.
2. When I type in my Domain https://www.example.com, WordPress redirects to http://www.example.com even though the site url is set to https.

I resaved permalinks and everything. (I also tried to install force ssl plugins, but then I get too many redirect issues since I think not all links are set to https yet)

Any hints?

Mike

Answer 1

If wordpress API gives you http instead of https it means that somewhere your data still contains HTTP, therefor you might need to take a more careful look at what urls are in your DB, for this specific functions you should look at your menus.

But probably the simplest way to solve this issue to to buffer page generation by using ob_start on init event and outputting the buffer on shutdosn after replacing all the http://mydomain to https://mydomain.

add_action('init','wpse199859_stat_buffering',0);

function wpse199859_stat_buffering() {
    ob_start();
}

add_action('shutdown','wpse199859_stop_buffering',0);

function wpse199859_stop_buffering() {
    $o = ob_get_contents();
    echo str_replace('http://mydomain','https://mydomain',$o);
}