WordPress HTTPS: This webpage has a redirect loop

Hi timbunch,

Well, that makes sense considering I completely changed the argument in that method from boolean in 1.8.5 to either ‘http’ or ‘https’ in 1.9. I wouldn’t expect the old method to work. 😛

I imagine what’s happening is is_ssl method is throwing a false positive due to some kind of proxying going on with your server configuration. The redirect loop is most likely caused by this conditional in the is_ssl method.

if ( isset($_SERVER['HTTP_X_FORWARDED_SERVER']) && !is_ssl() && strpos($this->https_url, $_SERVER['HTTP_X_URL_SCHEME'] . '://' . $_SERVER['HTTP_X_FORWARDED_SERVER']) !== false ) {
	return true;
}

Try replacing the method with this one:

function is_ssl() {
	// Some extra checks for proxies and Shared SSL
	if ( $this->shared_ssl == 1 && isset($_SERVER['HTTP_X_FORWARDED_SERVER']) && !is_ssl() && strpos($this->https_url, $_SERVER['HTTP_X_URL_SCHEME'] . '://' . $_SERVER['HTTP_X_FORWARDED_SERVER']) !== false ) {
		return true;
	} else if ( $this->shared_ssl == 1 && !is_ssl() && strpos($this->https_url, $_SERVER['HTTP_HOST']) !== false ) {
		return true;
	}
	return is_ssl();
}

Let me know if that prevents the redirect loops.

Thanks,
Mike

Hi yonisink,

Would you let me conduct some tests on your site? I’d like to be able to figure out exactly why this conditional is returning true. I have a pretty good idea, but it doesn’t seem to make sense.

If you want, you can email me an admin login to mike[at]mvied[dot]com. If you don’t want to create an admin account for me on your live site, a separate WordPress install on the same server would work. I’d love to be able to test some bug fixes in it. The code that I proposed really isn’t viable for all server configurations.

Thanks,
Mike