aaron44126

<p>Note: WordPress 3.3 offers a new, non-Flash uploader; this plugin may break it.</p>
<p>If you are using SSL (https) to secure your WordPress admin sessions and you<br />
have an SSL certificate that is not trusted by default (because it is self-<br />
signed, signed by an untrusted certificate authority, signed for a different<br />
domain name, etc.), then you probably have problems using the Flash uploader.</p>
<p>This plugin disables SSL usage by the Flash uploader.  This allows you to use<br />
the Flash uploader when you have FORCE_SSL_ADMIN enabled, with an untrusted SSL<br />
certificate.  This works around the vague “IO Error” you get from the Flash<br />
uploader in such a situation.</p>
<p>Note that this plugin comes with the following security implications:</p>
<ul>
<li>Flash uploads no longer use SSL, thus, your uploaded files aren’t encrypted<br />
during transmission.</li>
<li>Uploading files with the Flash uploader will transmit your WordPress<br />
authentication cookie in plain text.</li>
<li>If someone captures your login cookie (which is transmitted any time you load<br />
a page on your WordPress site while logged in, whether you are using SSL or<br />
not), they may be able to use it to upload files, view information about<br />
uploaded files, or change information about uploaded files.</li>
</ul>
<p>If the benefit of having the Flash uploader available outweighs these potential<br />
security risks for you, then you can use this plugin to enable the Flash<br />
uploader.</p>
<p>Note that this plugin override’s WordPress’s auth_redirect and<br />
wp_validate_auth_cookie functions, and may not work if you are using other<br />
plugins that override these functions.</p>


NO SSL Flash Upload

Turns off SSL for the Flash uploader when you have FORCE_SSL_ADMIN enabled, in case you are having trouble getting it to work ("IO Error").

SSL Zen

SSL Zen - Free SSL/HTTPS

<h3>Secure your website with a Free Let’s Encrypt SSL certificate.</h3>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/Jk86wUqoOco?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<p><a href="https://sslzen.com" rel="nofollow ugc">SSL Zen</a> is a ‘Free SSL certificate’ plugin that helps you to secure your website, protect your customer’s data and show your visitors you’re trustworthy and authentic.</p>
<p>Manually installing a free Let’s Encrypt SSL certificate involves editing SSL configuration files on your web server and troubleshooting issues. With this plugin, you can follow a few steps to get your free Let’s Encrypt SSL certificate. No coding required, no more mixed content, or insecure content warnings. You require no special developer experience to move your HTTP web pages to HTTPS or to force SSL on your website.</p>
<h4>Features of Free Version:</h4>
<ul>
<li>Generate a free SSL certificate by verifying your domain ownership</li>
<li>Install the free SSL certificate on your server or cPanel by following our video tutorials</li>
<li>Renew the free SSL certificate by re-verifying and re-installing the SSL certificate every 90 days</li>
<li>Settings page that shows your SSL certificate validity duration</li>
<li>Get an email reminder 30 days before the free SSL certificate expires</li>
<li>Secure padlock in the browser using Let’s Encrypt™ Free SSL certificate</li>
<li>SSL certificate is a ranking factor for search engines</li>
<li>SSL certificate displays information about your domain name and is verified by Let’s Encrypt™</li>
<li>Enable secure payment processing on websites with SSL certificates</li>
</ul>
<p>Note: The free version requires you to manually verify your domain name with <a href="https://letsencrypt.org" rel="nofollow ugc">Let’s Encrypt</a> by uploading a file on your server. You will also need to upload the free SSL certificate on your server and configure them. SSL certificate from Let’s Encrypt is only valid for <a href="https://letsencrypt.org/2015/11/09/why-90-days.html" rel="nofollow ugc">90 days</a> and need to be manually renewed. If you fail to renew your free SSL certificate, your website will start showing a not secure warning to the visitors.</p>
<p>If you want the plugin to automatically install the SSL certificate and auto-renew it, please check the premium version of the plugin.</p>
<h4>Features of Premium Version:</h4>
<ul>
<li>Automatic Domain Verification</li>
<li>Automatic free SSL Certificate Generation</li>
<li>Automatic free SSL Certificate Installation</li>
<li>Automatic free SSL Certificate Renewal</li>
<li>Automatic HTTPS redirection</li>
<li>Accelerate your website with StackPath’s Global Content Delivery Network</li>
<li>Premium Support – Live Chat, Email Support</li>
<li>Spam Protection</li>
<li>Brute-Force Protection</li>
<li>Forces Browser Validation on traffic anomalies</li>
<li>Performs Real-time threat intelligence for IP addresses, source location, and information on malicious IPs.</li>
<li>Patches known vulnerabilities in the Apache Struts framework by blocking requests suspected of exploiting these vulnerabilities</li>
<li>Enables a set of rules designed to block common WordPress exploits</li>
<li>Blocks clients performing multiple injection attacks.</li>
<li>Blocks Probing and Forced Browsing</li>
<li>Blocks SQL injection attack attempts</li>
<li>Blocks Cross-Site-Scripting (XSS) attack attempts</li>
<li>Blocks Shellshock attack attempts</li>
<li>Blocks requests suspected of being a Remote File Inclusion attempt</li>
<li>Blocks requests suspected of a Local File Inclusion attempt</li>
<li>Blocks attempts to access and potentially harm your servers through backdoors</li>
<li>Blocks requests suspected of web shell attempts</li>
<li>Blocks requests suspected of Response header injection attempts</li>
<li>Blocks Invalid User Agents</li>
<li>Blocks Unknown User Agents</li>
</ul>
<p><a href="https://sslzen.com/#pricing" rel="nofollow ugc">CLICK HERE TO THE BUY PREMIUM VERSION</a></p>
<h4>Why get an SSL certificate?</h4>
<ul>
<li>Trust – Starting from July 2018, Google Chrome has begun to mark all non-SSL websites as ‘Not-Secure’. When your users see the broken padlock, their trust wavers!</li>
<li>Security – SSL certificate provides authentication, trust and compliance. If your customer is filling out forms, or making payments on your website, you need an SSL certificate to protect sensitive data from eavesdroppers.</li>
<li>SEO – Google ranks SSL-enabled websites higher than unsecured websites. Hence, securing your website also helps get you on top of Google’s search results.</li>
</ul>
<h4>Facing problems with the plugin?</h4>
<p>We have detailed documentation for the most common issues you might face while installing SSL using our plugin. Please visit our documentation site at <a href="https://docs.sslzen.com/" rel="nofollow ugc">docs.sslzen.com</a></p>
<h4>Please leave a review</h4>
<p>If our plugin helped you secure your website, please leave a <a href="https://wordpress.org/support/plugin/ssl-zen/reviews/#new-post" rel="ugc">review here</a></p>
<p>For more information about our plugin, please visit <a href="https://sslzen.com" rel="nofollow ugc">sslzen.com</a></p>
<h4>Want SSL Zen plugin in your language?</h4>
<p>You can directly translate the plugin in your language <a href="https://translate.wordpress.org/projects/wp-plugins/ssl-zen/" rel="nofollow ugc">here</a><br />
When you add translations, get in touch with us as we will get you listed as a Project Translation Editor for our plugin.</p>
<h4>Legal:</h4>
<ul>
<li>By downloading our plugin, You agree to Let’s Encrypt® <a href="https://letsencrypt.org/documents/LE-SA-v1.2-November-15-2017.pdf" rel="nofollow ugc">Terms of Service</a></li>
<li>By downloading our plugin, You agree to <a href="https://github.com/yourivw/LEClient/blob/master/LICENSE" rel="nofollow ugc">LEClient license terms</a>, a PHP LetsEncrypt client library to verify domain ownership and generate an SSL certificate for your website.</li>
<li>We use <a href="https://letsdebug.net/" rel="nofollow ugc">Let’s Debug</a> API, a diagnostic tool to help figure out why you might not be able to issue a certificate for Let’s Encrypt®.</li>
<li>We use <a href="https://freemius.com" rel="nofollow ugc">Freemius</a> to collect non-sensitive diagnostic data about your website should you opt-in.</li>
</ul>
<p>Internet Security Research Group™, Let’s Encrypt®, ISRG™ are trademarks of the Internet Security Research Group. StackPath®, EdgeSSL™ are trademarks of StackPath, LLC. All rights reserved.</p>


SSL Zen — SSL Certificate Installer & HTTPS Redirects

Perfect

Helps install a free Let's Encrypt SSL certificate, redirects HTTP to HTTPS and forces SSL on all pages.

NO SSL Flash Upload vs SSL Zen — SSL Certificate Installer & HTTPS Redirects