aaron44126

Note: WordPress 3.3 offers a new, non-Flash uploader; this plugin may break it.
If you are using SSL (https) to secure your WordPress admin sessions and you 
have an SSL certificate that is not trusted by default (because it is self- 
signed, signed by an untrusted certificate authority, signed for a different 
domain name, etc.), then you probably have problems using the Flash uploader.
This plugin disables SSL usage by the Flash uploader. This allows you to use 
the Flash uploader when you have FORCE_SSL_ADMIN enabled, with an untrusted SSL 
certificate. This works around the vague “IO Error” you get from the Flash 
uploader in such a situation.
Note that this plugin comes with the following security implications:
<ul>
<li>Flash uploads no longer use SSL, thus, your uploaded files aren’t encrypted 
during transmission.</li>
<li>Uploading files with the Flash uploader will transmit your WordPress 
authentication cookie in plain text.</li>
<li>If someone captures your login cookie (which is transmitted any time you load 
a page on your WordPress site while logged in, whether you are using SSL or 
not), they may be able to use it to upload files, view information about 
uploaded files, or change information about uploaded files.</li>
</ul>
If the benefit of having the Flash uploader available outweighs these potential 
security risks for you, then you can use this plugin to enable the Flash 
uploader.
Note that this plugin override’s WordPress’s auth_redirect and 
wp_validate_auth_cookie functions, and may not work if you are using other 
plugins that override these functions.

NO SSL Flash Upload

Turns off SSL for the Flash uploader when you have FORCE_SSL_ADMIN enabled, in case you are having trouble getting it to work ("IO Error").

JS Morisset

A simple, safe, and reliable way to force HTTP URLs to HTTPS dynamically:
No setup required – simply activate the plugin to force HTTP URLs to HTTPS.
There are no plugin settings to adjust, and no changes are made to your WordPress configuration.
SIGNIFICANTLY FASTER than other popular plugins of this type:
Other well known plugins use <a href="https://secure.php.net/manual/en/function.ob-start.php" rel="nofollow ugc">PHP’s output buffer</a> to search & replace URLs in the rendered HTML, which is a technique that is error prone and negatively affects caching performance (as changes are not cached).
This plugin uses standard WordPress filters instead of PHP’s output buffer for maximum reliability, performance, caching compatibility, and uses 301 permanent redirects for best SEO results (<a href="https://en.wikipedia.org/wiki/HTTP_301" rel="nofollow ugc">301 redirects are considered best for SEO when moving from HTTP to HTTPS</a>).
Supports advanced proxy / load-balancing HTTP headers:
<ul>
<li><code>X-Forwarded-Proto</code> (aka <code>HTTP_X_FORWARDED_PROTO</code> server value)</li>
<li><code>X-Forwarded-Ssl</code> (aka <code>HTTP_X_FORWARDED_SSL</code> server value)</li>
</ul>
See <a href="https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-Proto" rel="nofollow ugc">Web technology for developers > HTTP > HTTP headers > X-Forwarded-Proto</a> for more details.
<h4>Plugin Requirements</h4>
Your web server must already be configured with an SSL certificate and able to handle HTTPS connections. 😉

JSM Force HTTP to HTTPS / SSL – No Setup, Fast and Reliable

No setup required - simply activate to force HTTP URLs to HTTPS using native WordPress filters and permanent redirects for best SEO.

NO SSL Flash Upload vs JSM Force HTTP to HTTPS / SSL – No Setup, Fast and Reliable