26
votes
Accepted
Setting $_SERVER['HTTPS']='on' prevents access to wp-admin
Special thanks to user42826.
According to the codex:
If WordPress is hosted behind a reverse proxy that provides SSL, but is hosted itself without SSL, these options will initially send any requests ...
- 613
18
votes
WordPress wp-admin https redirect loop
As I do not have the comment privilege yet, I will post this addition as another answer:
The solution proposed by Elias, to add the following to wp-config.php, did the trick for me:
/** SSL */
...
- 281
16
votes
Disable SSL / HTTPS for wordpress
Check your wp-config.php file for lines like:
define( 'WP_SITEURL', 'https://example.com' );
define( 'WP_HOME', 'https://example.com' );
Also check your database's {prefix}_options table:
SELECT ...
- 12.2k
9
votes
Accepted
the correct order of manual install WP and SSL on server
There's not a correct order. Either way will work and results in a WordPress install that is secured with SSL. What makes sense in a situation, depends on the setup and workflow.
If you can plan ...
- 6,238
9
votes
Accepted
How do I handle SSL properly when WP is behind a reverse proxy?
You can't hook is_ssl() to override the result, and as you've noticed you can't edit WordPress Core itself or your changes will get lost if you're using built-in automatic updates.
So the usual ...
- 4,342
8
votes
WordPress wp-admin https redirect loop
Another version for the books, just add this to the top of wp-config.php
Reason is that there could be load balancers or something that does not pass along the proper https value, so you have to grab ...
- 181
8
votes
Cannot login to Wordpress Admin with SSL terminated load balancer
I just figured out the issue.
You need to add the HTTPS/SSL settings before require_once(ABSPATH . 'wp-settings.php'); in your wp-config.php
So the relevant part of your wp-config.php should look ...
- 131
8
votes
Why is WordPress redirecting from http to https on a local environment?
Well, at my situation... I downloaded the company website from production to localhost because I was needed to prepare a development environment for some developers. The production is using https:// ...
- 83
8
votes
Local version of a Wordpress site - SSL/HTTPS enforced?
WordPress keeps WP_HOME and WP_SITEURL in DB, this is set during initial installation and usually is the domain of your website, in your case it is a domain with https.
Your visiting site via local ...
- 614
7
votes
Disable SSL / HTTPS for wordpress
You can modify .htaccess file:
RewriteEngine On
RewriteCond %{HTTPS} on
RewriteRule ^ http://%{HTTP_HOST}%{REQUEST_URI} [R=301,L,NE]
- 71
5
votes
Accepted
Divert http to https with WordPress on IIS
You'll need to update all of the URLs in your database to the HTTPS protocol:
Go and download Interconnect IT's Database Search & Replace Script here
Unzip the file and drop the folder where your ...
- 4,029
5
votes
Switching MultiSite installation from HTTP to HTTPS
I encountered the same issue: with WordPress multisite, there is no option or setting that defines if a site domain is HTTP or HTTPS. Even after replacing all occurrences in the database, a site ...
- 817
5
votes
WordPress wp-admin https redirect loop
5 year old Question...
Okay, I had this error, after installing my SSL Certificate and changing all links that were http to https using the wp-cli.phar found here.
I tried various configurations and ...
- 151
5
votes
Why is WordPress redirecting from http to https on a local environment?
Make sure you don't have installed and activated a plugin that forces a redirection to HTTPS, for example, the Really Simple SSL. If you have one, deactivate it on the localhost by renaming the plugin ...
- 151
5
votes
Accepted
Wordpress redirect loop on nginx + apache reverse proxy
Issue was caused by nginx serving example.com/index.php while Wordpress was redirecting to example.com/, thus causing a redirect loop.
This is the working config I used to fixed the redirect loop:
...
- 81
4
votes
Accepted
Favicon causes mixed content warning over SSL
After a little more reading via the WordPress Codex, I discovered that I was calling the favicon incorrectly. It should be called like this:
<link rel="shortcut icon" href="<?php echo ...
- 2,156
4
votes
Accepted
frontend upload return async-ajax.php 302
If you are using custom front-end registration through wp_signon function, check, if the second parameter, passed to that function is true:
$user_signon = wp_signon( $info, true ); ).
The second ...
- 56
4
votes
Wordpress DATABASE Update Manually?
Visit /wp-admin/upgrade.php on each site to manually upgrade the database e.g.
http://www.example.com/wp-admin/upgrade.php
This happens if you have a site on the WordPress network that doesn't ...
- 86
4
votes
Accepted
Multisite without .htaccess
e.g. wpinstance.com/wp-admin is not rewritten into wp-admin/ with a trailing slash, but into ugly long link: https://wpinstance.com/wp-login.php?redirect_to=https%3A%2F%2Fwpinstance.com%2Fwp-admin%2F&...
- 3,881
4
votes
How do I handle SSL properly when WP is behind a reverse proxy?
This is an older thread, but I like to share the solution.
Step 1: access DB > wp_options > siteurl : https://domain.com
Step 2: access DB > wp_options > home : https://domain.com
Step 3: ...
- 41
3
votes
How to force static assets with HTTP sources to load over HTTPS?
If you are using AWS Load Balancers with SSL Termination this is what I did:
Assuming you have your AWS ELB configured to do SSL termination and forwarding traffic to your Wordpress Target Group:
On ...
- 131
3
votes
Accepted
Adding https to wordpress website
I have recently solved my issue, I went on wordpress support, found my issue and how to fix it. I installed the SSL Insecure Content Fixer plugin and chose in the plugin settings for SSL Detection, ...
- 171
3
votes
Accepted
Infinite loop behind SSL proxy on non-standard port
Changing
proxy_set_header Host $host;
to
proxy_set_header Host $http_host;
fixed the issue.
(source)
- 1,231
3
votes
Accepted
All content is HTTPS, but browsers warn of HTTP mixed content
You have "www.wisconsinwetlands.org" URLs redirecting to insecure "http://wisconsinwetlands.org".
The cases you have used these is in the images on the page. Every image that is set as "https://www."...
- 5,021
2
votes
Accepted
Force non-ssl on WordPress RSS feeds in htaccess, using cloudflare
Ok, I must confess that right now I am feeling like this.
I think I might found a solution. I had the exact same problem and all I had to do was to add a page rule in my CloudFlare config.
Create a ...
- 36
2
votes
Accepted
Upgrade to SSL Breaks Admin Dashboard
Problem solved! The cause turned out to be dead simply. One of the mod_security rules was interfering with the admin dashboard loading. I didn't notice this earlier because I had failed to check ...
- 51
2
votes
Upgrade to SSL Breaks Admin Dashboard
Not sure what plugin you are using to enforce SSL, but I would disable it to prevent conflicts with the possible solution below.
To make sure you've updated all of your URLs to the HTTPS, do the ...
- 4,029
2
votes
Track down where script is being enqueued from
There is no filter when a script is registered, so it is hard to track that down. Use a full text search in all your theme and plugin files to find the source.
In addition, you can filter the URL ...
- 107k
2
votes
Disable SSL / HTTPS for wordpress
Issue must be siteurl and home values are updated in the database with https, to fix it do following.
To bring site instantly up, add following lines under existing define statements in wp-config....
2
votes
redirected you too many times
Having identify the plugin causing the issue with your site, you need to uninstall it in order to return everything back to normal.
Since you can currently not access your site but WordPress ...
- 492
Only top scored, non community-wiki answers of a minimum length are eligible