aaron44126

<p>Note: WordPress 3.3 offers a new, non-Flash uploader; this plugin may break it.</p>
<p>If you are using SSL (https) to secure your WordPress admin sessions and you<br />
have an SSL certificate that is not trusted by default (because it is self-<br />
signed, signed by an untrusted certificate authority, signed for a different<br />
domain name, etc.), then you probably have problems using the Flash uploader.</p>
<p>This plugin disables SSL usage by the Flash uploader.  This allows you to use<br />
the Flash uploader when you have FORCE_SSL_ADMIN enabled, with an untrusted SSL<br />
certificate.  This works around the vague “IO Error” you get from the Flash<br />
uploader in such a situation.</p>
<p>Note that this plugin comes with the following security implications:</p>
<ul>
<li>Flash uploads no longer use SSL, thus, your uploaded files aren’t encrypted<br />
during transmission.</li>
<li>Uploading files with the Flash uploader will transmit your WordPress<br />
authentication cookie in plain text.</li>
<li>If someone captures your login cookie (which is transmitted any time you load<br />
a page on your WordPress site while logged in, whether you are using SSL or<br />
not), they may be able to use it to upload files, view information about<br />
uploaded files, or change information about uploaded files.</li>
</ul>
<p>If the benefit of having the Flash uploader available outweighs these potential<br />
security risks for you, then you can use this plugin to enable the Flash<br />
uploader.</p>
<p>Note that this plugin override’s WordPress’s auth_redirect and<br />
wp_validate_auth_cookie functions, and may not work if you are using other<br />
plugins that override these functions.</p>


NO SSL Flash Upload

Turns off SSL for the Flash uploader when you have FORCE_SSL_ADMIN enabled, in case you are having trouble getting it to work ("IO Error").

Rehmat Alam

<p>WP SSL Redirect simply forces the SSL on your WordPress website by applying a 301 redirect from the HTTP path to HTTPS path. Please note that this plugin doesn’t install or configure any SSL certificate, instead it simply applies a 301 redirect to force the SSL on a WordPress website where a valid SSL is already properly installed.</p>
<h3>1.3</h3>
<ul>
<li>Added options to force www or non-www</li>
</ul>
<h3>1.3.1</h3>
<ul>
<li>A minor bug fix regarding query vars</li>
</ul>
<h3>1.3.2</h3>
<ul>
<li>Fixed a major bug related to sub-directory installations</li>
</ul>
<h3>1.4</h3>
<ul>
<li>Rewrote the redirection code to make it even simpler</li>
<li>Disabled the website URL update in the database</li>
</ul>
<h3>1.5</h3>
<ul>
<li>Bug fixes</li>
</ul>
<h3>1.6</h3>
<ul>
<li>Compatibility test with WordPress 6.1</li>
</ul>


WP SSL Redirect

Worked for me.

A very tiny plugin to force SSL on WordPress websites (via 301 redirects for SEO purpose).

NO SSL Flash Upload vs WP SSL Redirect