WordPress.org

Support

Support » Plugins and Hacks » [Resolved] Alot insecure

[Resolved] Alot insecure

  • MtpIntros
    Member

    @mtpintros

    Hi,

    I’ve just activated this plugin, in the hope that my page will FINALLY be a normal and good functioning page.

    My issues:
    – Google Chrome gives me the ugly Yellow triangle, instead of the green lock.
    – Only the home page shows up with HTTPS.
    – All the other pages give me the error: This webpage has a redirect loop ERR_TOO_MANY_REDIRECTS

    What i’ve tried:
    – Installing the plugin WordPress HTTPS (Does totally nothing)
    – Deactivating all the plugins
    – Changed the url from http:// to https:// in Settings > General

    My site: https://centralbusinesstransfers.nl

    I would really REALLY appreciate it if someone could help me..

    –EDIT–

    What I do know is that everything has to be linked with HTTPS:// or just //.
    I removed all the HTTP with the use page elements (F12 (Chrome)), and saw that my whole website looked how it supossed to be.
    I do know what the problem is right now, but I don’t know how to resolve this.

    Greetings, Adil

    https://wordpress.org/plugins/ssl-insecure-content-fixer/

Viewing 15 replies - 1 through 15 (of 19 total)
  • Plugin Author webaware
    Participant

    @webaware

    Looks like you’re behind a load balancer, so WordPress can’t tell that the page has been requested with SSL. If you look in the Tools menu in WordPress admin, you’ll see a link to a test page to see if is_ssl() can detect SSL correctly. It should tell you whether your website is giving you any hints about SSL or not.

    Likely, you’ll need to install the plugin from this gist. It detects when you’ve set WordPress to be SSL all the time, and tells WordPress that it’s running on SSL.

    https://gist.github.com/webaware/4688802

    cheers,
    Ross

    MtpIntros
    Member

    @mtpintros

    Thanks for your response Ross!

    I’m sorry to sound like a real noob, but how do I install a php file..
    Do I have to extract it to a .zip file, and then upload it via WP-admin ?

    Plugin Author webaware
    Participant

    @webaware

    G’day Adil,

    If you have FTP access to your website, just upload the PHP file into the wp-content/plugins folder. Otherwise, yes, you will need to add it to a .zip file and load that through the WordPress admin.

    Did you run “Test is_ssl()” on the Tools menu? What did it say?

    cheers,
    Ross

    MtpIntros
    Member

    @mtpintros

    Ah okay,

    This was the result of the test:
    SSL Insecure Content Fixer – is_ssl() test

    This page checks to see whether WordPress can even test for SSL. If it can’t, something else needs fixing.

    is_ssl() says: no, SSL not detected

    Your server may be behind a load balancer or reverse proxy.

    Please ask your web hosting provider why your website can’t detect SSL, and show them this article:

    WordPress is_ssl() doesnโ€™t work behind some load balancers

    So what I know have to do is upload the php file to the plugin map and that should fix it ?

    Plugin Author webaware
    Participant

    @webaware

    Yes, FTP that .php file into wp-content/plugins and activate it through the plugins admin. You must also ensure that the Site Address and WordPress Address are set to use https in Settings>General.

    cheers,
    Ross

    MtpIntros
    Member

    @mtpintros

    I’ve changed the site and wordpress adresses to https://, activated the .php plugin, and again did the ssl test.
    Same result as mentioned above, plus my website doesn’t load anymore..

    It gives me the Error: This webpage has a redirect loop ERR_TOO_MANY_REDIRECTS

    Greetings,
    Adil

    Plugin Author webaware
    Participant

    @webaware

    The is_ssl() test page won’t give a different result, it runs outside of WordPress so it doesn’t get fixed by the plugin; it’s just a diagnostic tool.

    If you are getting redirects, then you should delete that .php plugin and contact your website host for support. It sounds like you might have a setting somewhere that is redirecting pages back to http from https.

    cheers,
    Ross

    Plugin Author webaware
    Participant

    @webaware

    Or: do you have both SSL Insecure Content Fixer and WordPress HTTPS installed? If so, disable the latter and try again, because it’s been known to create redirect loops.

    MtpIntros
    Member

    @mtpintros

    I currently only have activated SSL insecure Content Fixer and Force SSL URL Scheme.

    I have already contacted my hosting for support, and they told me that I have to check the codes of wordpress..

    Plugin Author webaware
    Participant

    @webaware

    What’s in your .htaccess file? It’s in the root of the website.

    MtpIntros
    Member

    @mtpintros

    It’s completely empty..

    Just 5 empty lines.

    Plugin Author webaware
    Participant

    @webaware

    Oh, you’re running WordPress on a Windows server. [that’s your problem right there ๐Ÿ™‚ ]

    You’ll need to find someone who has experience configuring Windows servers to run WordPress properly, i.e. not me. Although WordPress can run on Windows, I’d never recommend it; too many problems. Best go back to your website host and ask them for assistance (and tell them that it’s not WordPress code, it’s their configuration that is broken).

    Also: looks like you haven’t deleted that .php plugin yet, for Force SSL URL Scheme. The site is still redirect looping.

    cheers,
    Ross

    MtpIntros
    Member

    @mtpintros

    Ahh… Okay…

    So when I say to my hosting that the problem is in their configration, they will ask me; what configuration.. What do I have to answer on that question..

    I have to be prepared to fully answer their standard stupid questions, because they are not really willing to help people. Mostly they give they say that the customer made the fault it self, and has to fix it hisself, like they did to me.

    Soo.. can you (exactly) explain what the problem is?

    Greetings,
    Adil

    Plugin Author webaware
    Participant

    @webaware

    Send them to this article, so that they know what the problem is. How they solve that on Windows is not something I know.

    cheers,
    Ross

    MtpIntros
    Member

    @mtpintros

    I’ll try contacting my hosting tommorrow, and will give a feedback on this post ๐Ÿ™‚

    Thank you very much for the help, Ross!

Viewing 15 replies - 1 through 15 (of 19 total)
  • The topic ‘[Resolved] Alot insecure’ is closed to new replies.