new notices on subsites of multisites seen with updates and removing SSL . . .

  • Resolved birdog123

    (@birdog123)


    5 years, 10 months ago

    Re (extended topic): new notices on subsites of multisites seen with updates and removing SSL menu for regular subsite admins unless given permission explicitly.

    Hi there,

    After recent updates, on MULTISITE installs, all my subsite admins see this https://www.screencast.com/t/OUuKVpQ0QD4 even when they do not intend or have SSL enabled.

    Can you push out a update to fix this so all my admins on subsites do not start asking me about what all this is about?

    Also, how can I hide this menu (https://www.screencast.com/t/8RCIAQ1g2a ) from ALL regular admins of subsites so they have not chance of messing around with it when they should not (unless one by one I allow access to this menu to them to enable or disable at their will)? I would like it hidden on ALL subsites, UNLESS I explicitly allow permission on a per subsite per case basis only when I know 100% the admin can handle working with it? I would, of course, like the Super Admin network admin of the MULTISITE to always see it.

    Thanks so much!

    Please let me know?

    🙂

    P.S. Just before I submitted this ticket, I noticed this on the primary site Network Super Admin settings too https://www.screencast.com/t/GpFfMkE9FGD This seems new to on the multisite notice. It is not true as my primary site has full SSL and also has a wildcard SSL too. Never seen this before FYI on the network settings.

    Could you allow settings in here as well to allow for us to enable or disable the SSL options setting menu only on select sites as we choose to prevent non SSL subsite admins from messing with the settings on their own and getting notices about SSL in the nag notices that confuse them?

    The page I need help with: [log in to see the link]

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Author Rogier Lankhorst

    (@rogierlankhorst)

    5 years, 10 months ago

    Hi @birddog123,

    Thanks for reporting it, I have committed a fix that hides the SSL cert notice for subsites (only visible on the network admin) and will show the notice only to users with activate_plugins cap. Lastly, the notice will not show when SSL has been enabled already.

    https://github.com/rlankhorst/really-simple-ssl

    I have dropped the notice you showed in the last screenshot, as it is not strictly necessary to have the main site on SSL.

    Nevertheless, it’s strange you get this message at all.

    The way it works is, if the admin is not loaded over https, it will try to detect the certificate, which in some cases might return false, even though it’s there.

    But if the admin loads over https, it will use the server variables, like $_SERVER[‘https’] , HTTP_X_FORWARDED_SSL, HTTP_CF_VISITOR, HTTP_CLOUDFRONT_FORWARDED_PROTO, HTTP_X_FORWARDED_PROTO etc to detect if it’s on SSL. This part hasn’t changed in the last update.

    As I understand it, your site is already on https, so the plugin should be able to detect it, even if the certificate detection fails.

    What does this URL on your site show?
    wp-content/plugins/really-simple-ssl/ssl-test-page.php

    And does it say “Already on SSL, start detecting configuration” in the debug log?

    Plugin Author Rogier Lankhorst

    (@rogierlankhorst)

    5 years, 10 months ago

    one additional note: I just realised the problem was probably only on subsites that do not want or need to be on SSL, so the certificate detection is not the issue here. In the 3.0 release the notice was placed in a separate function which did not have the checks for multisite environments etc.

    As this is fixed in the current commit, (scheduled for release in 1-2 weeks), this should resolve your issues.

    As for your feature request regarding the hiding of SSL menu’s on subsites: this is already a feature of the multisite add-on, which you can find on https://really-simple-ssl.com.

    Let me know if the current commit on github resolves your issues!

    Thread Starter birdog123

    (@birdog123)

    5 years, 10 months ago

    @rogierlankhors

    Yea, you are right on this “I just realised the problem was probably only on subsites that do not want or need to be on SSL”

    Am I able to add some code in manually to some file(s) to to plugin now to fix that instead of waiting for the official release? Or, can I just download the current version from https://github.com/rlankhorst/really-simple-ssl to replace?

    Ok on https://really-simple-ssl.com/ for the other feature. I will take a look on addons.

    🙂

    Plugin Author Mark

    (@markwolters)

    5 years, 10 months ago

    You can download the current version from Github, it has been updated to include the fix for this issue.

    Mark

    Thread Starter birdog123

    (@birdog123)

    5 years, 10 months ago

    @markwolters and @rogierlankhorst

    Great. Just downloaded and applied it and that did the trick on the notice on non https subsites. Thank you!

    I will look into the other thing soon.

    🙂

    Greg

    Plugin Author Rogier Lankhorst

    (@rogierlankhorst)

    5 years, 10 months ago

    Great! Thanks for the update!

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘new notices on subsites of multisites seen with updates and removing SSL . . .’ is closed to new replies.

Tags