Insecure Content (image) from plugin when using SSL for admin

Resolved feshin
(@feshin)

10 years, 9 months ago

First off, I love your plugin!

I am by no means 100% sure about this, but I believe there’s a problem with how the puzzle icon is included in the admin dashboard that causes security errors if you use SSL on the wordpress admin. Essentially the page is loading insecure content along with the secure content.

The image in question is wp-content/plugins/custom-post-widget/images/contentblock.png.

Anyway, just wanted to let you know about it.

http://wordpress.org/extend/plugins/custom-post-widget/

Viewing 6 replies - 1 through 6 (of 6 total)

Plugin Author Johan van der Wijk
(@vanderwijk)

10 years, 9 months ago

Hi feshin,

Thanks for checking this, the link to the icon is actually generated from the WP_PLUGIN_URL (line 31 of the file custom-post-widget.php).

I found that the plugin should be using plugins_url instead, so I will change that in the next release.

Plugin Author Johan van der Wijk
(@vanderwijk)

10 years, 9 months ago

I have created a new version of the plugin which should fix this issue, you can download it here: http://downloads.wordpress.org/plugin/custom-post-widget.2.3.zip

Could you please let me know if this works for you?

Thread Starter feshin
(@feshin)

10 years, 9 months ago

Hey Johan–

Thanks for the super fast turn-around.

I’ve tested the 2.3 version you posted, but I’m getting the white screen of death on the admin and front-end. Reverting back to the original version (2.0.2 in my case) brings it out of the white screen.

I don’t have access to the error logs at the moment, but could probably post some more detailed info later.

Plugin Author Johan van der Wijk
(@vanderwijk)

10 years, 9 months ago

Oops, sorry about that! In my hurry to help you I missed a call to CUSTOM_POST_WIDGET_DIR. It should work now:

http://downloads.wordpress.org/plugin/custom-post-widget.2.3.1.zip

Thread Starter feshin
(@feshin)

10 years, 9 months ago

Hey Johan–

Sorry for the slow response. I downloaded this and it works perfectly. Thank you so much for updating it. I really really appreciate it.

I see you have a donate form via paypal on your site. Unfortunately my Dutch is a bit rusty (ok, non-existent). Do you have an English version?

Plugin Author Johan van der Wijk
(@vanderwijk)

10 years, 9 months ago

Hi Feshin,

Don’t worry about Paypal, I would be just as happy if you could write a review here: http://wordpress.org/support/view/plugin-reviews/custom-post-widget

Thanks,

Johan

Viewing 6 replies - 1 through 6 (of 6 total)

The topic ‘Insecure Content (image) from plugin when using SSL for admin’ is closed to new replies.

Tags