The MU forums have moved to WordPress.org

SSL / https OR http (5 posts)

  1. irifkin
    Member
    Posted 15 years ago #

    Hello,

    I know there are other threads about this subject, but I don't see a solution.

    I have an install of wordpress mu (2.7) that I need to have entirely over SSL (https) -- not just the login or admin pages. My apache is setup fine and I have wordpress up and running. I even redirect from http to https.

    The problem is that "http" is hard-coded throughout the code when it refers to things like the "$current_site->domain". This causes problems such as posting comments doesn't work!

    Currently my need is to have the entire install with SSL enabled (because I need to restrict access to it). But, I can anticipate in the near future that people here will want some blogs https and others http.

    So I need a protocol agnostic solution.

    Would I have to change the dozens of files to remove the explicit "http"? What do you recommend?

    Thanks!

  2. easysleeper
    Member
    Posted 15 years ago #

    My quick solution would be to use your php editor to search and replace http with https in all files on the site, but that may cause even more problems, I am sure one of the pro's here know a trick if there is one, else, use a script to find/replace, or your php editor, I use Adobe Dreamweaver and I know it has that ability.

  3. irifkin
    Member
    Posted 15 years ago #

    Thanks for the suggestion easysleeper. Like you said, I'd be concerned that might cause more problems. But also I'd rather a solution that would allow me to switch between http and https, particularly from blog to blog. Basically I don't want wordpress to care if it's http or https. Anyone make changes like that?

  4. Trent
    Member
    Posted 15 years ago #

    Excuse my ignorance, as I haven't tried this, but in the Admin-SSL plugin it mentions in the documentation that if you want the "entire" site to be forced using SSL, it would be as simple as not using Ben's plugin and changing your BLOG URL in your options to be the https://yourblog.com

    Like I said, I never tested it out, so I don't know and based on your original post, you might have already tried that. Just throwing it out there. As well, I am pretty sure Automattic put out a forced SSL plugin as well, but I have never looked at it either.

    Trent

  5. irifkin
    Member
    Posted 15 years ago #

    Hi Trent,

    I didn't look into the Admin-SSL plugin because it didn't seem to be for the entire site. I'll take a look.

    But, I'm not sure if what your describing will work. The options page has the "http" hard-coded in it, so I cannot change the blog URL to what it should be. If I change the URL directly in the database it's only okay until someone submits the option page (even w/out changing the URL), which will then revert back to "http" because it's hard-coded in that PHP page.

About this Topic