aaron44126

<p>Note: WordPress 3.3 offers a new, non-Flash uploader; this plugin may break it.</p>
<p>If you are using SSL (https) to secure your WordPress admin sessions and you<br />
have an SSL certificate that is not trusted by default (because it is self-<br />
signed, signed by an untrusted certificate authority, signed for a different<br />
domain name, etc.), then you probably have problems using the Flash uploader.</p>
<p>This plugin disables SSL usage by the Flash uploader.  This allows you to use<br />
the Flash uploader when you have FORCE_SSL_ADMIN enabled, with an untrusted SSL<br />
certificate.  This works around the vague “IO Error” you get from the Flash<br />
uploader in such a situation.</p>
<p>Note that this plugin comes with the following security implications:</p>
<ul>
<li>Flash uploads no longer use SSL, thus, your uploaded files aren’t encrypted<br />
during transmission.</li>
<li>Uploading files with the Flash uploader will transmit your WordPress<br />
authentication cookie in plain text.</li>
<li>If someone captures your login cookie (which is transmitted any time you load<br />
a page on your WordPress site while logged in, whether you are using SSL or<br />
not), they may be able to use it to upload files, view information about<br />
uploaded files, or change information about uploaded files.</li>
</ul>
<p>If the benefit of having the Flash uploader available outweighs these potential<br />
security risks for you, then you can use this plugin to enable the Flash<br />
uploader.</p>
<p>Note that this plugin override’s WordPress’s auth_redirect and<br />
wp_validate_auth_cookie functions, and may not work if you are using other<br />
plugins that override these functions.</p>


NO SSL Flash Upload

Turns off SSL for the Flash uploader when you have FORCE_SSL_ADMIN enabled, in case you are having trouble getting it to work ("IO Error").

Freemius

SSL HTTPS Support

WP Encryption SSL

<p>HTTPS Secure your WordPress site with SSL certificate provided by <a href="https://letsencrypt.com" rel="nofollow ugc">Let’s Encrypt®</a> and force SSL / HTTPS sitewide, check your SSL score, fix insecure content & mixed content issues easily. Enable HTTPS secure padlock on your site within minutes.</p>
<p><a href="https://wpencryption.com/?utm_source=wordpress&utm_medium=description&utm_campaign=wpencryption" rel="nofollow ugc">WP Encryption</a> plugin registers your site, verifies your domain, generates SSL certificate for your site in simple mouse clicks without the need of any technical knowledge. A typical SSL installation without WP Encryption would require you to generate CSR, prove domain ownership, provide your bussiness data and deal with many more technical tasks!.</p>
<h3>PRO FEATURES WORTH UPGRADING</h3>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/jrkFwFH7r6o?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<ul>
<li>Automatic domain verification</li>
<li>Automatic SSL certificate installation</li>
<li>Automatic SSL renewal (Auto renews SSL certificate 30 days prior to expiry date)</li>
<li>Wildcard SSL support – Install Wildcard SSL certificate for your primary domain that covers ALL sub-domains. Automatic DNS based domain verification for Wildcard SSL installation (DNS should be managed by cPanel or Godaddy)</li>
<li>Multisite + Mapped domains support – Supports SSL installation for mapped domains</li>
<li>Advanced security headers & SSL monitoring</li>
<li>Top notch one to one priority support – Live Chat, Email, Premium Support Forum</li>
<li>SSL installation help for non-cPanel sites</li>
<li>Login security via passkeys (powered by WebAuthn) – No passwords. No brute force. Log in with passkeys protected by your browser or password manager — fast, secure, and frictionless.</li>
<li>Automated daily vulnerability scanning & reporting.</li>
<li>Automated daily malware & integrity scan</li>
<li>Instant notification for threats & security issues</li>
</ul>
<p><a href="https://wpencryption.com/?utm_source=wordpress&utm_medium=premiumfeatures&utm_campaign=wpencryption" rel="nofollow ugc">BUY PREMIUM VERSION</a></p>
<h3>5M+ SSL certificates generated – Switch to HTTPS easily</h3>
<p><span class="embed-youtube" style="text-align:center; display: block;"><iframe loading="lazy" class="youtube-player" width="750" height="422" src="https://www.youtube.com/embed/aKvvVlAlZ14?version=3&rel=1&showsearch=0&showinfo=1&iv_load_policy=1&fs=1&hl=en-US&autohide=2&wmode=transparent" allowfullscreen="true" style="border:0;" sandbox="allow-scripts allow-same-origin allow-popups allow-presentation allow-popups-to-escape-sandbox"></iframe></span></p>
<h3>FREE SSL PLUGIN FEATURES</h3>
<ul>
<li>Unlock every premium feature other plugins charge for — absolutely Free.</li>
<li>Verify domain ownership and generate free SSL certificate</li>
<li>Secure webmail and email with HTTPS</li>
<li>Download generated SSL certificate, key and Intermediate certificate files</li>
<li>Force HTTPS / Enable HTTPS with 301 htaccess redirection sitewide in one click</li>
<li>HTTPS redirection includes redirect loop fix for Cloudflare, StackPath, Load balancers and reverse proxies.</li>
<li>SSL Health page – Track your SSL score and control various SSL & Security features like HSTS strict transport security Header, HttpOnly secure cookies, etc,.</li>
<li>Enable important security headers including X-XSS-Protection, X-Content-Type-Options, Referrer-Policy</li>
<li>Enable mixed content / insecure content fixer</li>
<li>SSL monitoring & Automatic email notification prior to SSL certificate expiration</li>
<li>Advanced security features – stop user enumeration, disable file editing, hide login error, hide wp version and much more</li>
<li>Security score & security scanners including malware & integrity scanner, vulnerability scanner.</li>
</ul>
<p>(Optional) Running WordPress on a specialized VPS/Dedicated server without cPanel? You can download the generated SSL certificate files easily via “Download SSL Certificates” page and install it on your server by modifying server config file via SSH access as explained in our <a href="https://wpencryption.com/docs/" rel="nofollow ugc">DOCS</a>.</p>
<h3>(7.8.0) NEW ADVANCED SECURITY PAGE WITH INTEGRITY SCAN & MALWARE SCAN</h3>
<p>Discover the brand-new ‘Advanced Security & Scanner’ page — your command center for the most powerful protection your WordPress site has ever seen. Run malware and integrity scans to detect modified, additional, or suspicious files in your installation. Stay ahead of threats and keep your security score at its peak.</p>
<h3>ADVANCED HTTP SECURITY HEADERS</h3>
<p>Safeguard your site from cross-site scripting attacks, clickjacking, MIME sniffing attacks.</p>
<ul>
<li>Enable HTTPS Strict Transport Security Header to avoid request protocol downgrading</li>
<li>Disable directory listing to avoid directory traversing</li>
<li>Enable X-XSS protection, secure cookies, X-Content-Type-Options to avoid cross site scripting and MIME sniffing</li>
</ul>
<h3>Switch to HTTPS in seconds</h3>
<ul>
<li>
<p>Secure HTTPS browser padlock in minutes.</p>
</li>
<li>
<p>Free domain validated (DV) SSL certificates are provided by Let’s Encrypt (A non profit Global certificate Authority).</p>
</li>
<li>
<p>SSL encryption ensures protection against man-in-middle attacks by securely encrypting the data transfer between client and your server.</p>
</li>
</ul>
<h3>Optimized for Cloudflare and Reverse Proxies</h3>
<ul>
<li>
<p>Forcing HTTPS using the .htaccess method prevents redirect loops when your site is behind Cloudflare.</p>
</li>
<li>
<p>Compatible with reverse proxies and load balancers — avoids redirection conflicts.</p>
</li>
</ul>
<h3>Top Reasons Your WordPress Site Needs an SSL Certificate</h3>
<ol>
<li>
<p>SEO Benefit: Major search engines like Google ranks SSL enabled sites higher compared to non SSL sites. Thus bringing more organic traffic for your site.</p>
</li>
<li>
<p>Data Encryption: Data transmission between server and visitor are securely encrypted on a SSL site thus avoiding any data hijacks in-between the transmission(Ex: personal information, credit card information).</p>
</li>
<li>
<p>Trust: Google chrome shows non-SSL sites as ‘insecure’, bringing a feel of insecurity in website visitors.</p>
</li>
<li>
<p>Authentic: HTTPS green padlock represents symbol of trust, authenticity and security.</p>
</li>
</ol>
<h4>REQUIREMENTS</h4>
<p>Linux hosting, OpenSSL, CURL, allow_url_fopen should be enabled.</p>
<h4>Translations</h4>
<p>Many thanks to the generous efforts of our translators.</p>
<p>If you would like to translate plugin to your language, <a href="https://translate.wordpress.org/projects/wp-plugins/wp-letsencrypt-ssl/" rel="nofollow ugc">Feel free to sign up and start translating!</a></p>
<h4>Show Your Support</h4>
<ul>
<li>If you find any issue, please submit a bug via support forum.</li>
</ul>
<h3>LOVE WP ENCRYPTION SSL PLUGIN?</h3>
<p>If you find this plugin useful, please leave a <a href="https://wordpress.org/support/plugin/wp-letsencrypt-ssl/reviews/" rel="ugc">positive review</a>. Your reviews are our biggest motivation for further development of plugin.</p>
<h3>Disclaimer</h3>
<p>WP Encryption uses SSLLabs API for SSL scan & detection. By using the plugin, you agree to terms & conditions of <a href="https://www.ssllabs.com/downloads/Qualys_SSL_Labs_Terms_of_Use.pdf" rel="nofollow ugc">SSLLabs</a></p>
<p>By enabling the Vulnerability Scan feature, you agree to terms & conditions of <a href="https://vulnerability.wpsysadmin.com" rel="nofollow ugc">WPVulnerability Database API</a>. The information provided by the information database comes from different sources that have been reviewed by third parties. There is no liability of any kind for the information.</p>
<p>Security is an important subject regarding SSL/TLS certificates, of course. It is obvious that your private key, stored on your web server, should never be accessible from the web. When the plugin created the keys directory for the first time, it will store a .htaccess file in this directory, denying all visitors. Always make sure yourself your keys aren’t accessible from the web! We are in no way responsible if your private keys go public. If this does happen, the easiest solution is to check folder permissions on your server and make sure public access is forbidden for root folders. Next, create a new certificate.</p>


WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan

Worked well for free


 I'm using Bluehost's VPS and setting up a multisite in WordPress.However, applying HTTPS to the multisite turned out to be quite tricky.Even after searching on Google, the available information was quite limited.It took me a long time just to figure out that I needed a wildcard certificate.Then, I happened to come across the WP Encryption plugin, and it solved my problem perfectly.I don’t usually leave reviews, but I wanted to express my gratitude.Thank you for developing such an amazing plugin! 😁


The Best Choice for Multisite 👍

Lifetime SSL solution - Free SSL certificate & HTTPS redirect, resolve insecure site, fix SSL errors, SSL score, Easiest SSL & Security plugin.

NO SSL Flash Upload vs WP Encryption – One Click Free SSL Certificate & SSL / HTTPS Redirect, Security & SSL Scan