Skip to main content
26 votes
Accepted

Setting $_SERVER['HTTPS']='on' prevents access to wp-admin

Special thanks to user42826. According to the codex: If WordPress is hosted behind a reverse proxy that provides SSL, but is hosted itself without SSL, these options will initially send any requests ...
nu everest's user avatar
18 votes

WordPress wp-admin https redirect loop

As I do not have the comment privilege yet, I will post this addition as another answer: The solution proposed by Elias, to add the following to wp-config.php, did the trick for me: /** SSL */ ...
Michael Jung's user avatar
15 votes

Disable SSL / HTTPS for wordpress

Check your wp-config.php file for lines like: define( 'WP_SITEURL', 'https://example.com' ); define( 'WP_HOME', 'https://example.com' ); Also check your database's {prefix}_options table: SELECT ...
Pat J's user avatar
  • 11.9k
9 votes
Accepted

the correct order of manual install WP and SSL on server

There's not a correct order. Either way will work and results in a WordPress install that is secured with SSL. What makes sense in a situation, depends on the setup and workflow. If you can plan ...
rudtek's user avatar
  • 6,163
8 votes

WordPress wp-admin https redirect loop

Another version for the books, just add this to the top of wp-config.php Reason is that there could be load balancers or something that does not pass along the proper https value, so you have to grab ...
Timo Huovinen's user avatar
8 votes

Cannot login to Wordpress Admin with SSL terminated load balancer

I just figured out the issue. You need to add the HTTPS/SSL settings before require_once(ABSPATH . 'wp-settings.php'); in your wp-config.php So the relevant part of your wp-config.php should look ...
jtl's user avatar
  • 131
8 votes

Why is WordPress redirecting from http to https on a local environment?

Well, at my situation... I downloaded the company website from production to localhost because I was needed to prepare a development environment for some developers. The production is using https:// ...
busythomas's user avatar
8 votes

Local version of a Wordpress site - SSL/HTTPS enforced?

WordPress keeps WP_HOME and WP_SITEURL in DB, this is set during initial installation and usually is the domain of your website, in your case it is a domain with https. Your visiting site via local ...
sandrodz's user avatar
  • 614
8 votes
Accepted

How do I handle SSL properly when WP is behind a reverse proxy?

You can't hook is_ssl() to override the result, and as you've noticed you can't edit WordPress Core itself or your changes will get lost if you're using built-in automatic updates. So the usual ...
Rup's user avatar
  • 4,297
7 votes

Disable SSL / HTTPS for wordpress

You can modify .htaccess file: RewriteEngine On RewriteCond %{HTTPS} on RewriteRule ^ http://%{HTTP_HOST}%{REQUEST_URI} [R=301,L,NE]
user113337's user avatar
5 votes

WordPress wp-admin https redirect loop

5 year old Question... Okay, I had this error, after installing my SSL Certificate and changing all links that were http to https using the wp-cli.phar found here. I tried various configurations and ...
Ricky's user avatar
  • 151
5 votes
Accepted

Divert http to https with WordPress on IIS

You'll need to update all of the URLs in your database to the HTTPS protocol: Go and download Interconnect IT's Database Search & Replace Script here Unzip the file and drop the folder where your ...
Ethan O'Sullivan's user avatar
5 votes

Switching MultiSite installation from HTTP to HTTPS

I encountered the same issue: with WordPress multisite, there is no option or setting that defines if a site domain is HTTP or HTTPS. Even after replacing all occurrences in the database, a site ...
Manu's user avatar
  • 817
5 votes

Why is WordPress redirecting from http to https on a local environment?

Make sure you don't have installed and activated a plugin that forces a redirection to HTTPS, for example, the Really Simple SSL. If you have one, deactivate it on the localhost by renaming the plugin ...
Arif I.'s user avatar
  • 151
5 votes
Accepted

Wordpress redirect loop on nginx + apache reverse proxy

Issue was caused by nginx serving example.com/index.php while Wordpress was redirecting to example.com/, thus causing a redirect loop. This is the working config I used to fixed the redirect loop: ...
Capy's user avatar
  • 81
4 votes
Accepted

frontend upload return async-ajax.php 302

If you are using custom front-end registration through wp_signon function, check, if the second parameter, passed to that function is true: $user_signon = wp_signon( $info, true ); ). The second ...
dhawk's user avatar
  • 56
4 votes
Accepted

Favicon causes mixed content warning over SSL

After a little more reading via the WordPress Codex, I discovered that I was calling the favicon incorrectly. It should be called like this: <link rel="shortcut icon" href="<?php echo ...
Sam's user avatar
  • 2,146
4 votes

Wordpress DATABASE Update Manually?

Visit /wp-admin/upgrade.php on each site to manually upgrade the database e.g. http://www.example.com/wp-admin/upgrade.php This happens if you have a site on the WordPress network that doesn't ...
mikemanger's user avatar
4 votes
Accepted

Multisite without .htaccess

e.g. wpinstance.com/wp-admin is not rewritten into wp-admin/ with a trailing slash, but into ugly long link: https://wpinstance.com/wp-login.php?redirect_to=https%3A%2F%2Fwpinstance.com%2Fwp-admin%2F&...
MrWhite's user avatar
  • 3,881
3 votes

How to force static assets with HTTP sources to load over HTTPS?

If you are using AWS Load Balancers with SSL Termination this is what I did: Assuming you have your AWS ELB configured to do SSL termination and forwarding traffic to your Wordpress Target Group: On ...
curveorzos's user avatar
3 votes
Accepted

Adding https to wordpress website

I have recently solved my issue, I went on wordpress support, found my issue and how to fix it. I installed the SSL Insecure Content Fixer plugin and chose in the plugin settings for SSL Detection, ...
Toufic Batache's user avatar
3 votes
Accepted

Infinite loop behind SSL proxy on non-standard port

Changing proxy_set_header Host $host; to proxy_set_header Host $http_host; fixed the issue. (source)
That Brazilian Guy's user avatar
3 votes
Accepted

All content is HTTPS, but browsers warn of HTTP mixed content

You have "www.wisconsinwetlands.org" URLs redirecting to insecure "http://wisconsinwetlands.org". The cases you have used these is in the images on the page. Every image that is set as "https://www."...
butlerblog's user avatar
  • 5,021
2 votes
Accepted

Force non-ssl on WordPress RSS feeds in htaccess, using cloudflare

Ok, I must confess that right now I am feeling like this. I think I might found a solution. I had the exact same problem and all I had to do was to add a page rule in my CloudFlare config. Create a ...
Xyborg's user avatar
  • 36
2 votes

Is the Wordpress HTTPS Plugin Still Safe To Use?

If you are looking to use HTTPS, I reccomend following this wordpress guide: https://make.wordpress.org/support/user-manual/web-publishing/https-for-wordpress/#implementing-https-for-wordpress You ...
jake's user avatar
  • 217
2 votes

FORCE_SSL_ADMIN not working

This can also happen if WordPress is hosted behind a reverse proxy that provides SSL. Paste the following in your theme's functions.php: define('FORCE_SSL_ADMIN', true); // a comma-separated list e....
Suraj's user avatar
  • 21
2 votes
Accepted

Upgrade to SSL Breaks Admin Dashboard

Problem solved! The cause turned out to be dead simply. One of the mod_security rules was interfering with the admin dashboard loading. I didn't notice this earlier because I had failed to check ...
Mike P's user avatar
  • 51
2 votes

Upgrade to SSL Breaks Admin Dashboard

Not sure what plugin you are using to enforce SSL, but I would disable it to prevent conflicts with the possible solution below. To make sure you've updated all of your URLs to the HTTPS, do the ...
Ethan O'Sullivan's user avatar
2 votes

iHow to redirect all http traffic to https now that a SSL certificate is added?

You can replace your URLs in PHPMyAdmin instead - make sure you have backed up your database though. You'd need to change this code and run it: UPDATE wp_posts SET guid = replace(guid, 'http://www....
Zoe Epix's user avatar
2 votes

Track down where script is being enqueued from

There is no filter when a script is registered, so it is hard to track that down. Use a full text search in all your theme and plugin files to find the source. In addition, you can filter the URL ...
fuxia's user avatar
  • 107k

Only top scored, non community-wiki answers of a minimum length are eligible