Questions tagged [ssl]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
67
votes
7answers
69k views

WordPress wp-admin https redirect loop

I am using nginx as my webserver and i have edited the configuration file to point to https, so i change the WordPress url settings to https and also added the WordPress force ssl admin code to my wp-...
21
votes
3answers
13k views

Is it safe to use sslverify => true for with wp_remote_get/wp_remote_post

I normally use this argument to prevent errors with wp_remote_get and wp_remote_post array( 'sslverify' => false ) For security reasons I would like to set it to true (or remove it since the ...
17
votes
1answer
15k views

Setting $_SERVER['HTTPS']='on' prevents access to wp-admin

First off my server is sitting behind a load balancer. My SSL certificate sits on the load balancer and handles HTTPS. The data coming in on port 443 is forwarded to the Wordpress server using HTTP ...
16
votes
4answers
62k views

SSL Breaks Wordpress CSS

We purchased an SSL certificat from network solutions (would never recommend them to my worst enemy, btw). Apparently it's activated... did a few checks that says it's activated for our domain. But ...
11
votes
2answers
13k views

Switching MultiSite installation from HTTP to HTTPS

I installed MultiSite with the URL set as http://example.com, but now I want to force all requests to go over HTTPS, so I'm trying to change the URL to be https://example.com. I've gone through the ...
9
votes
4answers
3k views

Howto force SSL for all requests?

Is there a way to force SSL for all requests? Much like the option to use admin ssl, but for all requests, including the ones who are not logged in.
8
votes
2answers
3k views

Anyone figured out how to use WordPress MultiSite with Domain Mapping & SSL?

I've been looking all over to find a solution for SSL with WordPress MultiSite and Domain Mapping. Ideally, I'd like to purchase an SSL cert for each domain (or potentially a wildcard cert) anyone ...
7
votes
8answers
86k views

Disable SSL / HTTPS for wordpress

I've installed WordPress and setup the database. I go to the address and the setup page is there, but no CSS. I think: something's wrong, but if I just do the setup maybe everything will just go back ...
7
votes
5answers
8k views

Use a different domain for SSL

long time lurker - first time poster. A client of mine has a website developed in CakePHP, and a wordpress blog installed in the /blog/ directory. Let's say the url of the main domain is http://...
7
votes
1answer
3k views

Multisite Domain Mapping with SSL

I've done some searching but couldn't find this issue elsewhere, apologies if this has already been discussed elsewhere. I've set up a Multisite install; and am trying to set up domain mapping for ...
6
votes
7answers
18k views

Is there a way to force ssl on certain pages

I want to force a secure connection on some of my pages (ones with forms), but I don't want the whole site to work with ssl (slows it down) Is there a way to configure specific pages to require ssl?
6
votes
2answers
7k views

Protocol neutral URLS with wp_enqueue_script (SSL issues)?

How do I use wp_enqueue_script so that I get protocol neutral URLs? Here is how I'm currently using it: <?php wp_enqueue_script('name', get_bloginfo('template_directory'). '/js/name.pack.js'); ?&...
6
votes
5answers
3k views

How can I make an Ajax login form work with FORCE_SSL_ADMIN enabled?

I'm working on a site that requires an https secured admin area and a secure front-end area as well where private information will be shown. My preference for user login is an Ajax-enabled widget that ...
6
votes
3answers
10k views

SSL redirect loop using Wordpress HTTPS Plugin

I'm using Wordpress in a NginX server proxying to an apache server which serves the pages. Recently we wanted to force the use of SSL at least in the Admin section, so we installed the Wordpress HTTPS ...
6
votes
2answers
829 views

SSL breaks customizer: page isn't returned from ajax

I have a WordPress install using a Comodo SSL certificate. I have the WordPress HTTPS plugin installed and I'm using the AZ theme, and the admin is set to load over HTTPS. So far so good. On the ...
5
votes
1answer
36k views

Disable all https in WordPress

Recently I moved my WordPress to another server (MediaTemple), but now my admin is redirecting for HTTPS all the time, but I don't have SSL enabled on my domain, so it just keep warning that is not ...
5
votes
6answers
745 views

Share same domain for wp-admin but for different website

I have site like http://www.foo.com http://www.bar.com And I've a wildcard SSL cert *.example.com, instead of buying two SSL certs for the above two domains, can I re-use my existing wildcard SSL ...
5
votes
4answers
2k views

How to use Wordpress multisite with mixed HTTP and HTTPS sites?

I have a multi-wordpress installation (3.x) with 5 sites and only one of them is using SSL. All of these are running on their own domain, and the http://ssldomain.com forwards to https://ssldomain....
4
votes
1answer
201 views

the correct order of manual install WP and SSL on server

I am wundering what the correct order of these next things is when you want to manually install Wordpress and have SSL installed on your server and website. Is this the correct order to do that in? ...
4
votes
2answers
9k views

Images causing Mixed Content with SSL

I'm trying to use SSL on my login pages but I have some images on this page and it also looks like it's loading a Google Font API so it's not saying the page is secure. I tried to force SSL using: ...
4
votes
5answers
22k views

Force HTTPS using .htaccess - stuck in redirect loop

My Wordpress website is located at example.com/wordpress and I need everything inside to be accessible only using SSL. I've created a .htaccess rule that redirects http -> https: RewriteEngine On ...
4
votes
1answer
3k views

SSL wildcard issue for wp multisite subdomains

I have a problem with wildcard SSL and my host says they are unable to get it to work how I thought it would work. I have bought a wildcard SSL certificate thinking that it should work nicely with ...
4
votes
1answer
3k views

Cannot login to Wordpress Admin with SSL terminated load balancer

Running Wordpress 4.7.3 with a HAProxy (version 1.7.2) frontend and Apache 2.4.10 with PHP 5.6 backend. This is all under Debian 8.7 as well. X-Forwarded-For and X-Forwarded-Proto are set correctly ...
4
votes
2answers
15k views

bloginfo() and get_template_directory_uri() with SSL?

I have a Wordpress theme I'm attempting to put on an SSL-only website. There is no non-SSL version of the site. The Wordpress theme uses various functions like bloginfo('pingback_url'), bloginfo('...
4
votes
1answer
5k views

Favicon causes mixed content warning over SSL

I have the following favicon loading via header.php: <link rel="shortcut icon" type="image/x-icon" href="<?php echo esc_url( home_url( '/wp-content/themes/themename/img/favicon.ico' ) ); ?>"&...
4
votes
2answers
1k views

After updating site to use SSL all images in posts point to http://

I recently upgrade my site to use SSL through a reverse proxy. I have changed the WordPress address and site address in the Settings menu and the main page loads just fine: https://www.scotthelme.co....
4
votes
2answers
1k views

How to get the post editor and media library to respect HTTPS administration mode?

I have a site with FORCE_SSL_ADMIN turned on. When I'm editing a post with an embedded image, or when I'm viewing images through the media library, they are loaded using the http:// protocol rather ...
4
votes
1answer
705 views

htaccess rewrite conflict with wordpress rules and ssl

this one has me buggered- I have the below htaccess rule to redirect ssl to non-ssl pages. this works fine, except I'd like to exclude certain wordpress requests from this rule- for example, https://...
4
votes
1answer
215 views

WordPress is Inserting images into Post as HTTP and not HTTPS

I've logged into my site in HTTPS and I'm editing on a specific post. I've dragged an image to the edit window and am now inserting an image. The thing is WordPress is inserting the image as HTTP ...
4
votes
1answer
1k views

Run WordPress frontend and backend in different domains

I want to run my WP frontend as www.example.com and my backend (i.e. wp-admin) as user1.example.org, is it possible? The reason is I want to host lot of sites in a single server which has only 1 IP ...
4
votes
1answer
2k views

SSL certificate for the host could not be verified

I'm getting this error in a log file created by WooCommerce "The SSL certificate for the host could not be verified." The error is being generated by WordPress' file /wp-includes/class-http.php ...
3
votes
9answers
6k views

Multisite database upgrade SSL error

I have upgraded my Multisite setup WordPress to 3.6.1. And after that, when I do Network Upgrade > Database Upgrade it's showing: Warning! Problem updating http://www.example.com/site1. Your ...
3
votes
2answers
134 views

Adding https to wordpress website

I am using Cloudflare (service that gives free HTTPS for your website) to have https on my Wordpress website but when I change the site URL and Wordpress URL to https://, I get a "redirected you too ...
3
votes
2answers
3k views

Upgrade to SSL Breaks Admin Dashboard

I am currently running an instance of WordPress, version 4.5.3, on an Amazon EC2 server. It uses: CentOS 7 (OS) and has SELinux enabled. Server runs Apache with mod_security and mod_evasive PHP 5.6....
3
votes
1answer
500 views

How to redirect url requests to https? [closed]

I've searched far and wide for a solution to this and I am sure it's simple but I simply couldn't find a solution. This is the regular wordpress redirect code: <IfModule mod_rewrite.c> ...
3
votes
2answers
1k views

Globally force SSL on all pages

Right now my domain www.example.com is setup to force HTTPS and it works. The site also correctly links everything to HTTPS. (there are no occurences of HTTP in the database anywhere). But if you are ...
3
votes
2answers
177 views

Track down where script is being enqueued from

I have a WordPress site with an SSL certificate. It all works fine, except that this little insecure shield icon shows up because the header has an enqueued non-https script. The issue is that I ...
3
votes
3answers
94 views

Is the Wordpress HTTPS Plugin Still Safe To Use? [closed]

I have a client who wants to accept Authorize.net donations on their website. We only have a need for one page to be secured for our purposes. I've put a lot of research into this and it seems that ...
3
votes
3answers
4k views

Force home page to be https?

I have a SSL certificate and https plugin which both work fine along with changing the Settings in the Wordpress menu to https but I have to manually enter 'https' to see the Secure version, is there ...
3
votes
1answer
47 views

What's the right move with SSL for user based site?

I'm working on a site where a user registers and has the ability to create various custom post types (let's call them tournaments for simplicity although it's slightly more complicated than just one ...
3
votes
1answer
2k views

Admin-Ajax.php, SSL, Non-SSL

I have a WordPress site behind a reverse proxy. The site is over http, except the wp-admin area, which is under https. We don't have BasicAuth or anything running on top of the admin area. One of our ...
3
votes
0answers
128 views

Make default new sites https (multisite)

Quick background case: If I use Softaculous to install WP in cPanel, I can specify which protocol I would like the site to be in... (so they have something that addresses this). However with my ...
2
votes
1answer
3k views

Remove the http protocol from images

I've been banging my head on the wall trying to filter my posts to remove the http: protocol from the img src and I think I may have found a solution. Does anybody see anything wrong with this ...
2
votes
2answers
5k views

Local version of a Wordpress site - SSL/HTTPS enforced?

I am trying to setup a local version of a website that is live, I have downloaded the files and database and believe it is all ready and sorted, but I am having an issue whereby the site is trying to ...
2
votes
1answer
9k views

Enabling SSL on wordpress results in 404

I'm trying to force ssl login and admin but it's not working. I've tried going through the isecurity theme which didn't work. I then tried doing it manually by modifying my wp-config.php to include: ...
2
votes
3answers
28k views

Locked out of WordPress Site Admin after enabling Force SSL on WordPress Https (SSL)

I am in a terrible fix. I have been locked out of Site Admin and the solutions offered by the plug-in team in their documentation aren't working. I've tried both methods using Webmatrix. I have to ...
2
votes
1answer
727 views

Multisite without .htaccess

Do I need to use .htaccess file for a multisite? I have setup basic wordpress site and configured it with apache2 VirtualHost as: <VirtualHost *:80> ... RewriteEngine On Options ...
2
votes
1answer
4k views

SSL setup: wp-login css doesn't load over httpS

I have a multisite setup, using SSL. Everything works fine. visitors are getting all there content over https. There is not a single url without httpS in my page source. (inclusing urls to css,js ...
2
votes
1answer
2k views

“Upgrade Network” error: stuck with SSL certificate verification

When trying to update one Network/MU install, I got the following error. Warning! Problem updating https://subdomain-A.example.com. Your server may not be able to connect to sites running on it. ...
2
votes
2answers
1k views

SSL: How to make customizer images Protocol Relative in WordPress?

I'm trying to eliminate "mixed content" on my website and have done so with every area of the site except for one. Any image uploaded via the Theme Customizer is not protocol relative nor https, all ...

1
2 3 4 5
7