Questions tagged [ssl]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
70
votes
8answers
80k views

WordPress wp-admin https redirect loop

I am using nginx as my webserver and i have edited the configuration file to point to https, so i change the WordPress url settings to https and also added the WordPress force ssl admin code to my wp-...
22
votes
3answers
16k views

Is it safe to use sslverify => true for with wp_remote_get/wp_remote_post

I normally use this argument to prevent errors with wp_remote_get and wp_remote_post array( 'sslverify' => false ) For security reasons I would like to set it to true (or remove it since the ...
21
votes
4answers
69k views

SSL Breaks Wordpress CSS

We purchased an SSL certificat from network solutions (would never recommend them to my worst enemy, btw). Apparently it's activated... did a few checks that says it's activated for our domain. But ...
18
votes
1answer
20k views

Setting $_SERVER['HTTPS']='on' prevents access to wp-admin

First off my server is sitting behind a load balancer. My SSL certificate sits on the load balancer and handles HTTPS. The data coming in on port 443 is forwarded to the Wordpress server using HTTP ...
11
votes
8answers
110k views

Disable SSL / HTTPS for wordpress

I've installed WordPress and setup the database. I go to the address and the setup page is there, but no CSS. I think: something's wrong, but if I just do the setup maybe everything will just go back ...
11
votes
2answers
15k views

Switching MultiSite installation from HTTP to HTTPS

I installed MultiSite with the URL set as http://example.com, but now I want to force all requests to go over HTTPS, so I'm trying to change the URL to be https://example.com. I've gone through the ...
9
votes
4answers
3k views

Howto force SSL for all requests?

Is there a way to force SSL for all requests? Much like the option to use admin ssl, but for all requests, including the ones who are not logged in.
8
votes
2answers
3k views

Anyone figured out how to use WordPress MultiSite with Domain Mapping & SSL?

I've been looking all over to find a solution for SSL with WordPress MultiSite and Domain Mapping. Ideally, I'd like to purchase an SSL cert for each domain (or potentially a wildcard cert) anyone ...
7
votes
5answers
8k views

Use a different domain for SSL

long time lurker - first time poster. A client of mine has a website developed in CakePHP, and a wordpress blog installed in the /blog/ directory. Let's say the url of the main domain is http://...
7
votes
1answer
3k views

Multisite Domain Mapping with SSL

I've done some searching but couldn't find this issue elsewhere, apologies if this has already been discussed elsewhere. I've set up a Multisite install; and am trying to set up domain mapping for ...
6
votes
7answers
19k views

Is there a way to force ssl on certain pages

I want to force a secure connection on some of my pages (ones with forms), but I don't want the whole site to work with ssl (slows it down) Is there a way to configure specific pages to require ssl?
6
votes
2answers
7k views

Protocol neutral URLS with wp_enqueue_script (SSL issues)?

How do I use wp_enqueue_script so that I get protocol neutral URLs? Here is how I'm currently using it: <?php wp_enqueue_script('name', get_bloginfo('template_directory'). '/js/name.pack.js'); ?&...
6
votes
5answers
9k views

Why is WordPress redirecting from http to https on a local environment?

I recently set up a live WordPress site on my local environment through Duplicator. I can access the wp-admin but I cannot access the main site as wp redirects the site from http to https ...
6
votes
5answers
3k views

How can I make an Ajax login form work with FORCE_SSL_ADMIN enabled?

I'm working on a site that requires an https secured admin area and a secure front-end area as well where private information will be shown. My preference for user login is an Ajax-enabled widget that ...
6
votes
3answers
10k views

SSL redirect loop using Wordpress HTTPS Plugin

I'm using Wordpress in a NginX server proxying to an apache server which serves the pages. Recently we wanted to force the use of SSL at least in the Admin section, so we installed the Wordpress HTTPS ...
6
votes
2answers
869 views

SSL breaks customizer: page isn't returned from ajax

I have a WordPress install using a Comodo SSL certificate. I have the WordPress HTTPS plugin installed and I'm using the AZ theme, and the admin is set to load over HTTPS. So far so good. On the ...
5
votes
1answer
36k views

Disable all https in WordPress

Recently I moved my WordPress to another server (MediaTemple), but now my admin is redirecting for HTTPS all the time, but I don't have SSL enabled on my domain, so it just keep warning that is not ...
5
votes
1answer
834 views

htaccess rewrite conflict with wordpress rules and ssl

this one has me buggered- I have the below htaccess rule to redirect ssl to non-ssl pages. this works fine, except I'd like to exclude certain wordpress requests from this rule- for example, https://...
5
votes
6answers
933 views

Share same domain for wp-admin but for different website

I have site like http://www.foo.com http://www.bar.com And I've a wildcard SSL cert *.example.com, instead of buying two SSL certs for the above two domains, can I re-use my existing wildcard SSL ...
5
votes
4answers
2k views

How to use Wordpress multisite with mixed HTTP and HTTPS sites?

I have a multi-wordpress installation (3.x) with 5 sites and only one of them is using SSL. All of these are running on their own domain, and the http://ssldomain.com forwards to https://ssldomain....
4
votes
1answer
204 views

the correct order of manual install WP and SSL on server

I am wundering what the correct order of these next things is when you want to manually install Wordpress and have SSL installed on your server and website. Is this the correct order to do that in? ...
4
votes
2answers
7k views

Local version of a Wordpress site - SSL/HTTPS enforced?

I am trying to setup a local version of a website that is live, I have downloaded the files and database and believe it is all ready and sorted, but I am having an issue whereby the site is trying to ...
4
votes
2answers
9k views

Images causing Mixed Content with SSL

I'm trying to use SSL on my login pages but I have some images on this page and it also looks like it's loading a Google Font API so it's not saying the page is secure. I tried to force SSL using: ...
4
votes
5answers
23k views

Force HTTPS using .htaccess - stuck in redirect loop

My Wordpress website is located at example.com/wordpress and I need everything inside to be accessible only using SSL. I've created a .htaccess rule that redirects http -> https: RewriteEngine On ...
4
votes
1answer
3k views

Cannot login to Wordpress Admin with SSL terminated load balancer

Running Wordpress 4.7.3 with a HAProxy (version 1.7.2) frontend and Apache 2.4.10 with PHP 5.6 backend. This is all under Debian 8.7 as well. X-Forwarded-For and X-Forwarded-Proto are set correctly ...
4
votes
1answer
3k views

SSL wildcard issue for wp multisite subdomains

I have a problem with wildcard SSL and my host says they are unable to get it to work how I thought it would work. I have bought a wildcard SSL certificate thinking that it should work nicely with ...
4
votes
2answers
16k views

bloginfo() and get_template_directory_uri() with SSL?

I have a Wordpress theme I'm attempting to put on an SSL-only website. There is no non-SSL version of the site. The Wordpress theme uses various functions like bloginfo('pingback_url'), bloginfo('...
4
votes
1answer
5k views

Favicon causes mixed content warning over SSL

I have the following favicon loading via header.php: <link rel="shortcut icon" type="image/x-icon" href="<?php echo esc_url( home_url( '/wp-content/themes/themename/img/favicon.ico' ) ); ?>"&...
4
votes
2answers
1k views

After updating site to use SSL all images in posts point to http://

I recently upgrade my site to use SSL through a reverse proxy. I have changed the WordPress address and site address in the Settings menu and the main page loads just fine: https://www.scotthelme.co....
4
votes
2answers
1k views

How to get the post editor and media library to respect HTTPS administration mode?

I have a site with FORCE_SSL_ADMIN turned on. When I'm editing a post with an embedded image, or when I'm viewing images through the media library, they are loaded using the http:// protocol rather ...
4
votes
1answer
252 views

WordPress is Inserting images into Post as HTTP and not HTTPS

I've logged into my site in HTTPS and I'm editing on a specific post. I've dragged an image to the edit window and am now inserting an image. The thing is WordPress is inserting the image as HTTP ...
4
votes
1answer
1k views

Run WordPress frontend and backend in different domains

I want to run my WP frontend as www.example.com and my backend (i.e. wp-admin) as user1.example.org, is it possible? The reason is I want to host lot of sites in a single server which has only 1 IP ...
4
votes
1answer
2k views

SSL certificate for the host could not be verified

I'm getting this error in a log file created by WooCommerce "The SSL certificate for the host could not be verified." The error is being generated by WordPress' file /wp-includes/class-http.php ...
3
votes
9answers
7k views

Multisite database upgrade SSL error

I have upgraded my Multisite setup WordPress to 3.6.1. And after that, when I do Network Upgrade > Database Upgrade it's showing: Warning! Problem updating http://www.example.com/site1. Your ...
3
votes
2answers
137 views

Adding https to wordpress website

I am using Cloudflare (service that gives free HTTPS for your website) to have https on my Wordpress website but when I change the site URL and Wordpress URL to https://, I get a "redirected you too ...
3
votes
2answers
4k views

Upgrade to SSL Breaks Admin Dashboard

I am currently running an instance of WordPress, version 4.5.3, on an Amazon EC2 server. It uses: CentOS 7 (OS) and has SELinux enabled. Server runs Apache with mod_security and mod_evasive PHP 5.6....
3
votes
1answer
530 views

How to redirect url requests to https? [closed]

I've searched far and wide for a solution to this and I am sure it's simple but I simply couldn't find a solution. This is the regular wordpress redirect code: <IfModule mod_rewrite.c> ...
3
votes
2answers
2k views

Globally force SSL on all pages

Right now my domain www.example.com is setup to force HTTPS and it works. The site also correctly links everything to HTTPS. (there are no occurences of HTTP in the database anywhere). But if you are ...
3
votes
2answers
262 views

Track down where script is being enqueued from

I have a WordPress site with an SSL certificate. It all works fine, except that this little insecure shield icon shows up because the header has an enqueued non-https script. The issue is that I ...
3
votes
3answers
95 views

Is the Wordpress HTTPS Plugin Still Safe To Use? [closed]

I have a client who wants to accept Authorize.net donations on their website. We only have a need for one page to be secured for our purposes. I've put a lot of research into this and it seems that ...
3
votes
3answers
4k views

Force home page to be https?

I have a SSL certificate and https plugin which both work fine along with changing the Settings in the Wordpress menu to https but I have to manually enter 'https' to see the Secure version, is there ...
3
votes
1answer
49 views

What's the right move with SSL for user based site?

I'm working on a site where a user registers and has the ability to create various custom post types (let's call them tournaments for simplicity although it's slightly more complicated than just one ...
3
votes
1answer
2k views

Admin-Ajax.php, SSL, Non-SSL

I have a WordPress site behind a reverse proxy. The site is over http, except the wp-admin area, which is under https. We don't have BasicAuth or anything running on top of the admin area. One of our ...
3
votes
0answers
217 views

Make default new sites https (multisite)

Quick background case: If I use Softaculous to install WP in cPanel, I can specify which protocol I would like the site to be in... (so they have something that addresses this). However with my ...
3
votes
2answers
2k views

Why wordpress multisite redirect to wp-signup if site exists?

I just create a site on my Multisite domain (example.com), for instance site1.example.com After this, I try to enter on https://site1.example.com/wp-admin, but I'm redirected to https://www.example....
2
votes
1answer
3k views

Remove the http protocol from images

I've been banging my head on the wall trying to filter my posts to remove the http: protocol from the img src and I think I may have found a solution. Does anybody see anything wrong with this ...
2
votes
1answer
10k views

Enabling SSL on wordpress results in 404

I'm trying to force ssl login and admin but it's not working. I've tried going through the isecurity theme which didn't work. I then tried doing it manually by modifying my wp-config.php to include: ...
2
votes
3answers
28k views

Locked out of WordPress Site Admin after enabling Force SSL on WordPress Https (SSL)

I am in a terrible fix. I have been locked out of Site Admin and the solutions offered by the plug-in team in their documentation aren't working. I've tried both methods using Webmatrix. I have to ...
2
votes
1answer
877 views

Multisite without .htaccess

Do I need to use .htaccess file for a multisite? I have setup basic wordpress site and configured it with apache2 VirtualHost as: <VirtualHost *:80> ... RewriteEngine On Options ...
2
votes
1answer
6k views

SSL setup: wp-login css doesn't load over httpS

I have a multisite setup, using SSL. Everything works fine. visitors are getting all there content over https. There is not a single url without httpS in my page source. (inclusing urls to css,js ...

1
2 3 4 5
7