aaron44126

<p>Note: WordPress 3.3 offers a new, non-Flash uploader; this plugin may break it.</p>
<p>If you are using SSL (https) to secure your WordPress admin sessions and you<br />
have an SSL certificate that is not trusted by default (because it is self-<br />
signed, signed by an untrusted certificate authority, signed for a different<br />
domain name, etc.), then you probably have problems using the Flash uploader.</p>
<p>This plugin disables SSL usage by the Flash uploader.  This allows you to use<br />
the Flash uploader when you have FORCE_SSL_ADMIN enabled, with an untrusted SSL<br />
certificate.  This works around the vague “IO Error” you get from the Flash<br />
uploader in such a situation.</p>
<p>Note that this plugin comes with the following security implications:</p>
<ul>
<li>Flash uploads no longer use SSL, thus, your uploaded files aren’t encrypted<br />
during transmission.</li>
<li>Uploading files with the Flash uploader will transmit your WordPress<br />
authentication cookie in plain text.</li>
<li>If someone captures your login cookie (which is transmitted any time you load<br />
a page on your WordPress site while logged in, whether you are using SSL or<br />
not), they may be able to use it to upload files, view information about<br />
uploaded files, or change information about uploaded files.</li>
</ul>
<p>If the benefit of having the Flash uploader available outweighs these potential<br />
security risks for you, then you can use this plugin to enable the Flash<br />
uploader.</p>
<p>Note that this plugin override’s WordPress’s auth_redirect and<br />
wp_validate_auth_cookie functions, and may not work if you are using other<br />
plugins that override these functions.</p>


NO SSL Flash Upload

Turns off SSL for the Flash uploader when you have FORCE_SSL_ADMIN enabled, in case you are having trouble getting it to work ("IO Error").

WebFactory

<p><a href="https://wpforcessl.com/?ref=wporg" rel="nofollow ugc">WP Force SSL</a> helps you redirect insecure HTTP traffic to secure HTTPS and fix SSL errors <strong>without touching any code</strong>. Activate Force SSL and everything will be set and SSL enabled. The entire site will move to HTTPS using your SSL certificate. It works with any SSL certificate. It can be free SSL certificate from Let’s Encrypt or a paid SSL certificate.</p>
<p>How to add SSL & enable SSL? Most hosting companies support the free SSL certificate from Let’s Encrypt, so login to your hosting panel and add SSL certificate. You’ll see a button labeled “Add SSL Certificate” or “Add Let’s Encrypt Certificate” and after that it’s 1 click to have the SSL enabled on your site with WP Force SSL. If that doesn’t work get <a href="https://wpforcessl.com/" rel="nofollow ugc">WP Force SSL PRO</a> and it’ll generate free SSL certificate for your site. And will regenerate SSL certificate every 90 days.</p>
<p>Access WP Force SSL settings via the main Settings menu -> WP Force SSL.</p>
<h4>SSL Tests available in the plugin</h4>
<ul>
<li>is site on localhost?</li>
<li>check SSL certificate</li>
<li>check SSL certificate expiry date</li>
<li>is latest version of Force SSL used?</li>
<li>are known incompatible SSL plugins active?</li>
<li>is WP address URL set for SSL?</li>
<li>is WP home URL set for SSL?</li>
<li>is SSL monitoring enabled (pro feature)</li>
<li>is HTTPS redirection working?</li>
<li>is file redirection working (pro feature)</li>
<li>is HSTS enabled?</li>
<li>check mixed-content issue (pro feature)</li>
<li>is htaccess available & writable?</li>
<li>is 404 redirection enabled (pro feature)</li>
</ul>
<h4>Settings</h4>
<ul>
<li>redirect HTTP to HTTPS</li>
<li>fix mixed-content (pro)</li>
<li>enable HSTS</li>
<li>force secure cookies (pro)</li>
<li>cross-site scripting protection (pro)</li>
<li>expect CT header</li>
<li>X-Frame options</li>
<li>show WP Force SSL menu in admin bar</li>
<li>show WP Force SSL widget in admin dashboard</li>
</ul>
<h4>SSL certificate testing tool</h4>
<p>WP Force SSL comes with an SSL certificate testing tool. It tests if the SSL certificate is valid, properly installed & up-to date.</p>
<h4>Need support?</h4>
<p>We’re here for you! Things get frustrating when they don’t work so make sure you <a href="https://wordpress.org/support/plugin/wp-force-ssl/" rel="ugc">open a support topic</a> in the official Force SSL forum. We answer all questions within a few hours!</p>
<h4>External Assets</h4>
<p>A big thank you to <a href="https://sweetalert2.github.io/" rel="nofollow ugc">SweetAlert2</a> authors which we use to make alerts nicer. And to <a href="https://depositphotos.com/248496280/stock-illustration-online-payment-protection-system-concept.html" rel="nofollow ugc">DepositPhotos</a> for the lovely header image.</p>


WP Force SSL & HTTPS SSL Redirect

Enable SSL & HTTPS redirect with 1 click! Add SSL certificate & WP Force SSL to redirect site from HTTP to HTTPS & fix SSL errors.

NO SSL Flash Upload vs WP Force SSL & HTTPS SSL Redirect