Flex Plugins

<p>Flex SSL is a lightweight WordPress plugin designed to secure your website by enforcing HTTPS across your entire site. Key features include:</p>
<ul>
<li><strong>Force HTTPS:</strong> Automatically redirect all HTTP requests to HTTPS.</li>
<li><strong>Auto-Update URLs:</strong> Change WordPress site and home URLs from HTTP to HTTPS.</li>
<li><strong>Cloudflare/Proxy Support:</strong> Detects HTTPS headers from Cloudflare or other reverse proxies to avoid redirect loops.</li>
<li><strong>Security Headers:</strong> Optionally add HSTS, X-Frame-Options, X-Content-Type-Options, Referrer-Policy. Force SSL Admin when HTTPS is in use.</li>
<li><strong>Mixed Content Fixer:</strong> Corrects HTTP to HTTPS in content, excerpts, thumbnails, scripts, styles, content_url, and home_url.</li>
<li><strong>SSL Status:</strong> View current SSL status and certificate expiry date.</li>
<li><strong>Redirect Options:</strong> Choose between 301 (permanent) and 302 (temporary) redirects.</li>
<li><strong>Logs & Reports:</strong> Monitor changes and events in a log system.</li>
<li><strong>Let’s Encrypt Integration (Coming Soon):</strong> Plan to automatically generate and renew SSL certificates.</li>
</ul>
<h3>License</h3>
<p>Flex SSL is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 2 of the License, or (at your option) any later version.</p>
<p>For more details, see https://www.gnu.org/licenses/gpl-2.0.html.</p>


Flex SSL

Enables SSL & forces HTTPS on WordPress, updating URLs & adding security headers. Supports reverse proxies & soon integrates Let's Encrypt.

Glimbyte

arditcaushi

<h4>Complete SSL Security Management for WordPress</h4>
<p>Glimbyte SSL Guardian is a comprehensive yet simple SSL management plugin for WordPress. Set up HTTPS security in just 5 minutes and protect your visitors with automatic SSL certificate monitoring, mixed content fixing, and HSTS security headers.</p>
<p>Ideal for:</p>
<ul>
<li>WordPress site owners migrating to HTTPS</li>
<li>Developers managing multiple client sites</li>
<li>E-commerce stores requiring SSL compliance</li>
<li>Anyone who wants secure SSL management</li>
</ul>
<h4>Key Features</h4>
<p><strong>HTTPS Enforcement</strong></p>
<ul>
<li>One-click HTTPS redirect (301/302/307)</li>
<li>Force HTTPS across entire site</li>
<li>URL exclusion patterns (for specific pages)</li>
<li>Proxy/CDN compatible (CloudFlare, AWS, etc.)</li>
<li>Works with subdirectory installations</li>
</ul>
<p><strong>Mixed Content Detection & Fix</strong></p>
<ul>
<li>Real-time automatic fixing via output buffer</li>
<li>Comprehensive database scanner (posts, pages, custom post types)</li>
<li>Detects: images, scripts, stylesheets, iframes, CSS backgrounds</li>
<li>One-click “Fix All” for database content</li>
<li>AJAX-based scanning (no timeouts on large sites)</li>
<li>Choose HTTPS or protocol-relative URLs (//)</li>
</ul>
<p><strong>SSL Certificate Monitoring</strong></p>
<ul>
<li>Displays certificate details (issuer, expiry, validity)</li>
<li>Visual status indicators (valid/expiring/expired)</li>
<li>Days remaining countdown</li>
<li>Automatic 24-hour cache for performance</li>
<li>Handles connection errors gracefully</li>
</ul>
<p><strong>Expiry Email Alerts</strong></p>
<ul>
<li>Automatic email notifications before expiry</li>
<li>Configurable thresholds (default: 30, 14, 7 days)</li>
<li>WP Cron scheduled daily checks</li>
<li>Test email functionality</li>
<li>Custom recipient email address</li>
</ul>
<p><strong>HSTS Security Headers</strong></p>
<ul>
<li>Enable/disable HTTP Strict Transport Security</li>
<li>Configurable max-age (1 month to 2 years)</li>
<li>includeSubDomains option</li>
<li>Preload list preparation</li>
<li>Automatic HTTPS-only delivery</li>
</ul>
<p><strong>WordPress Multisite Support</strong></p>
<ul>
<li>Network admin menu</li>
<li>Network-wide enforcement option</li>
<li>Per-site override permissions</li>
<li>Centralized certificate monitoring</li>
</ul>
<p><strong>Professional Support System</strong></p>
<ul>
<li>Built-in support request form</li>
<li>Automatic system info collection</li>
<li>Direct email to Glimbyte support team</li>
<li>GDPR-compliant consent checkbox</li>
</ul>
<p><strong>Debug & Logging</strong></p>
<ul>
<li>Detailed activity logging</li>
<li>View recent 100 entries</li>
<li>Clear all logs</li>
<li>Export logs as text file</li>
<li>Disabled by default for performance</li>
</ul>
<h4>Why Choose Glimbyte SSL Guardian?</h4>
<p><strong>🎯 Simple Yet Powerful</strong><br />
Unlike complex SSL plugins with hundreds of settings, Glimbyte SSL Guardian gives you exactly what you need with a clean, intuitive interface. Most users complete setup in under 5 minutes.</p>
<p><strong>⚡ Performance Optimized</strong></p>
<ul>
<li>Transient caching for certificate checks (24 hours)</li>
<li>Conditional asset loading (only on admin pages)</li>
<li>No database queries on frontend</li>
<li>AJAX for long operations</li>
<li>Minimal memory footprint</li>
</ul>
<p><strong>🔐 Security First</strong></p>
<ul>
<li>WordPress coding standards compliant</li>
<li>All functions properly prefixed</li>
<li>Settings API used throughout</li>
<li>Nonces on all forms</li>
<li>Capability checks everywhere</li>
<li>Input sanitization & output escaping</li>
<li>No eval() or create_function()</li>
<li>ABSPATH checks in all files</li>
</ul>
<p><strong>📱 Works Everywhere</strong></p>
<ul>
<li>Compatible with all hosting environments</li>
<li>Works with CloudFlare, AWS CloudFront, other CDNs</li>
<li>Supports reverse proxies and load balancers</li>
<li>Subdirectory installation compatible</li>
<li>Multisite network ready</li>
</ul>
<p><strong>🌍 Translation Ready</strong></p>
<ul>
<li>Text domain: glimbyte-ssl-guardian</li>
<li>All strings translatable</li>
<li>Ready for localization</li>
</ul>
<h4>Perfect For These Use Cases</h4>
<p><strong>Migrating to HTTPS</strong><br />
Moving from HTTP to HTTPS? Glimbyte SSL Guardian handles everything:<br />
1. Enable HTTPS redirect<br />
2. Scan and fix mixed content<br />
3. Enable HSTS<br />
4. Done!</p>
<p><strong>E-commerce Sites</strong><br />
WooCommerce, Easy Digital Downloads, and other e-commerce plugins require SSL. Glimbyte SSL Guardian ensures:</p>
<ul>
<li>All pages load securely</li>
<li>No mixed content warnings</li>
<li>Certificate never expires (with alerts)</li>
<li>HSTS for extra security</li>
</ul>
<p><strong>Client Sites & Agencies</strong><br />
Managing SSL for multiple clients? Features you’ll love:</p>
<ul>
<li>Quick dashboard overview</li>
<li>Automatic expiry alerts</li>
<li>Remote monitoring capability</li>
<li>Professional support system</li>
<li>Multisite support</li>
</ul>
<p><strong>Developers</strong><br />
Clean, well-documented code that’s easy to extend:</p>
<ul>
<li>WordPress coding standards</li>
<li>Action and filter hooks</li>
<li>Modular class structure</li>
<li>No deprecated functions</li>
</ul>
<h4>What Users Say</h4>
<p>⭐⭐⭐⭐⭐ “Finally, an SSL plugin that just works!”<br />
⭐⭐⭐⭐⭐ “Saved me hours of manual work fixing mixed content”<br />
⭐⭐⭐⭐⭐ “The certificate monitoring gives me peace of mind”</p>
<h4>Support & Documentation</h4>
<p><strong>Need Help?</strong></p>
<ul>
<li>Use built-in support form: SSL Guardian > Dashboard</li>
<li>Email: support@glimbyte.ie</li>
<li>Website: https://glimbyte.ie</li>
</ul>
<p><strong>Developers</strong></p>
<ul>
<li>Documentation: https://glimbyte.ie/glimbyte-ssl-guardian-docs</li>
<li>Hooks & Filters: Full documentation in plugin files</li>
</ul>
<h4>About Glimbyte</h4>
<p>Glimbyte SSL Guardian is developed by Glimbyte Ltd, a Dublin-based web development company specializing in WordPress security, e-commerce, and custom development.</p>
<p><strong>Our Services:</strong></p>
<ul>
<li>SSL Certificate Installation</li>
<li>WordPress Security Audits</li>
<li>Site Migration & HTTPS Setup</li>
<li>WooCommerce Development</li>
<li>Custom Plugin Development</li>
<li>Priority Plugin Support</li>
</ul>
<p>Visit https://glimbyte.ie for more information.</p>
<h3>External Services</h3>
<p>This plugin connects to an external API service operated by Glimbyte when you use the built-in support request form.</p>
<p><strong>Service Details:</strong></p>
<ul>
<li><strong>Service Provider:</strong> Glimbyte (https://glimbyte.ie)</li>
<li><strong>Service URL:</strong> https://glimbyte.ie/wp-json/glimbyte/v1/support-request</li>
<li><strong>Purpose:</strong> To process and deliver support requests from users to the Glimbyte support team</li>
<li><strong>When Used:</strong> Only when you manually submit the support form via the plugin’s Support tab</li>
</ul>
<p><strong>Data Transmitted:</strong></p>
<p>When you submit a support request, the following data is sent to this API endpoint:</p>
<ul>
<li>Your name (as provided in the form)</li>
<li>Your email address (as provided in the form)</li>
<li>Your phone number (optional, if provided)</li>
<li>Your message/support request</li>
<li>Your website URL</li>
<li>WordPress version</li>
<li>PHP version</li>
<li>SSL certificate status</li>
<li>Active/inactive SSL features</li>
</ul>
<p><strong>Important Notes:</strong></p>
<ul>
<li>This service is ONLY used when you explicitly click “Submit” on the support form</li>
<li>No data is sent automatically or during normal plugin operation</li>
<li>You must explicitly check the consent checkbox before submission</li>
<li>The data is transmitted over HTTPS for security</li>
</ul>
<p><strong>Service Terms & Privacy:</strong></p>
<ul>
<li>Terms of Service: https://glimbyte.ie/terms</li>
<li>Privacy Policy: https://glimbyte.ie/privacy</li>
</ul>
<p>By using the support form, you consent to sending this data to Glimbyte for the purpose of receiving technical support for the plugin.</p>
<h4>Privacy Policy</h4>
<p>Glimbyte SSL Guardian stores all settings locally in your WordPress database and does not collect or transmit any user data during normal operation.</p>
<p><strong>Support Form Data Transmission:</strong></p>
<p>When you use the built-in support form, the following data is sent to support@glimbyte.ie:</p>
<ul>
<li>Your name, email, phone (if provided), and message</li>
<li>Your website URL</li>
<li>WordPress version</li>
<li>PHP version</li>
<li>SSL certificate status</li>
</ul>
<p>This data is used solely for providing support and is not shared with third parties.</p>
<h3>Credits</h3>
<p>Developed with ❤️ by Ardit Caushi and the Glimbyte team in Dublin, Ireland.</p>
<p>Icons by WordPress Dashicons.</p>
<h4>1.0.2</h4>
<ul>
<li>Fixed: Translators comment positioning for better i18n compliance</li>
<li>Note: “Global variable” warnings are false positives (template variables, not globals)</li>
<li>Note: Other warnings are acceptable WordPress patterns</li>
</ul>
<h4>1.0.3</h4>
<ul>
<li>Fixed: Added phpcs:ignore comments for template variables to pass Plugin Check</li>
<li>Note: Template variables in view files are not actual globals – this is standard WordPress practice</li>
<li>Improved: Code standards compliance for WordPress.org submission</li>
</ul>
<h4>1.0.4</h4>
<ul>
<li>Fixed: Corrected phpcs:ignore placement in certificate.php for remaining template variables</li>
<li>All Plugin Check errors resolved (0 errors)</li>
<li>Ready for WordPress.org submission</li>
</ul>
<h4>1.0.5</h4>
<ul>
<li>Fixed: phpcs:disable comment placement in certificate.php (moved to same line as opening PHP tag)</li>
<li>All Plugin Check errors resolved – 0 errors!</li>
<li>Final version ready for WordPress.org submission</li>
</ul>
<h4>1.1.2</h4>
<ul>
<li>Improved: Added phpcs:ignore directive for admin tab navigation (non-data $_GET usage)</li>
<li>Improved: Added phpcs:ignore directive for multisite uninstall database query</li>
<li>Code quality: Addressed all Plugin Check warnings with proper documentation</li>
</ul>
<h4>1.1.1</h4>
<ul>
<li>Fixed: Complete renaming – all SecureWP references replaced with Glimbyte SSL Guardian</li>
<li>Fixed: Navigation tabs now use correct page slug (glimbyte-ssl-guardian)</li>
<li>Fixed: AJAX actions renamed from securewp_ssl_* to glimbyte_ssl_*</li>
<li>Fixed: CSS classes and JavaScript selectors updated for consistency</li>
<li>Fixed: Multisite network admin menu slug updated</li>
<li>Fixed: Email subject and X-Mailer header updated to new branding</li>
</ul>
<h4>1.1.0</h4>
<ul>
<li>MAJOR UPDATE: Plugin renamed from “SecureWP SSL Manager” to “Glimbyte SSL Guardian”</li>
<li>Changed slug from securewp-ssl-manager to glimbyte-ssl-guardian  </li>
<li>Fixed: All inline scripts/styles now properly enqueued per WordPress.org guidelines</li>
<li>Fixed: Added explicit buffer closing for ob_start() in mixed content handler</li>
<li>Fixed: Removed marketing superlatives from description (most comprehensive, perfect, bulletproof)</li>
<li>Fixed: Updated privacy policy to accurately reflect support form data transmission</li>
<li>Fixed: Plugin URI now points to valid URL (https://glimbyte.ie)</li>
<li>Improved: All function/class/constant names updated to new prefix</li>
<li>Note: Existing settings will be preserved – no reconfiguration needed</li>
</ul>


Glimbyte SSL Guardian

Complete SSL management plugin: force HTTPS, fix mixed content, monitor certificates, and enable HSTS. Easy setup in 5 minutes.

Flex SSL vs Glimbyte SSL Guardian