Search Results for 'ssl'

What should I do now?
External Image Link: http://i.imgur.com/QWK8WpL.jpg?1

My competitors also trying to hack my site, sometimes I see Robots.txt is missing. When Its Missing they stop trying to log in my site. Now verified my SSL & Also get SiteLock Security Service. SiteLock showing there is no Security Issue.

I am in Risk, So I don’t want to allow the /wp-content/plugins/ but I want to allow only that resources Google Showing.

Please Suggest me.

• This reply was modified 10 years by K.H.R.

I found that there is a function being called when you add a post that parses the content and processes the shortcode

Managed to find it and it now works – here is my very specific solution

<h3>Videos</h3>
<?php
$videos = get_posts(array(
'post_type' => 'post',
'category' => 53,
'meta_query' => array(
array(
'key' => 'article_event', // name of custom field
'value' => '"'.get_the_ID().'"', // matches exaclty 123", not just 123. This prevents a match for "1234"
'compare' => 'LIKE'
)
)
));
//echo get_the_ID();
if( $videos ):
$vID = '';
$vArray = array();
foreach( $videos as $video ):
$vID .= get_field( "article_video_id", $video->ID ) .',';
$vArray[] = get_field( "article_video_id", $video->ID );
endforeach;
endif;
$vID = rtrim($vID, ',');

//print_r($td_playlist_video);
update_post_meta(get_the_ID(),'td_playlist_video',$td_playlist_video);
$videoSC = '[vc_row][vc_column][td_block_video_youtube playlist_title="TITLE" playlist_yt="'.$vID.'"][/vc_column][/vc_row]';
echo do_shortcode($videoSC);
?>

I use duplicator to make clone of my site on my live server, then download the backup file to my PC from the site. Works flawlessly even on 10 year old sites.

You can always do a repair/optimize on your dbase first, which you should be doing anyway with at least things like the wp-optimize plugin.

You can also try to repair dbase or optimize via phpmyadmin.

Make sure you have enough memory assigned to php to run the tool; make sure your timeout isn’t too short for Duplicator.

That may not help, but it’s been my own experience.

(not theme related, obviously … )

We opted to make “https everywhere” since Google prefers that for mobile — meaning ALL pages, not just ecom/store — even the privacy policy. This ensures you have ONE canonical version with https always and don’t have to juggle that (nightmare I say!) in WP and Yoast.

There are some cheaper SSL certs out there if you shop around.
We use Godaddy for our main business site SSL cert since our DNS is there (or rather domain > nameservers > our local DNS.

For main server SSL, we’re using our long time pals (they do NOT host our server which is at SoftLayer in Dallas, an IBM company) — TSS – https://my-tss.com/ssl-certificates.php

A RapidSSL cert is $20/year and suitable for most sites not doing enterprise level stuff. Wildcard cert is $129/year. Which is typical.

I think we pay $135 for the wildcard cert via Godaddy, but again that’s for our main business portal and NOT for our news sites. We’ll be securing CaliforniaNewswire.com likely early in 2016, and using the $20 option.

Peace out !

Back to work on my damn WooCommerce store … what a nightmare … sheesh. Cubecart 5 had 7 updates in 6 years. WordPress + Plugins + WooCommerce + Extensions I think is up to 50 updates since Spring. Wild, simply wild. Want a career ? Become a WooCommerce Ninja … seriously.

I will likely start a consulting business just to help people keep their WooCommerce sites working.

Oops… back to work ! 😉

Thanks for your input Chris, always a good read! SSL seems indeed the way to go and I do think I had a small rank boost because of it, even though I made a mess of it.

I have to learn more about using canonical link element correctly, make some choices and then set things straight so hopefully I get google to rank http or https at my discretion while not losing the rank boost.

$25/yr for SSL is really cheap! Got mine for free (1yr) when I recently moved on to a better server (siteground) but renewal will be $65 and it’s not “wildcarded”. Guess I’ll try to negotiate with them when the time comes 🙂

Thanks for your words again, I’ll get back at this if I get more knowledge and experience worth discussion.
Cheers!

(Indeed, funky shit at word break! FF/WIN7-64)

• This reply was modified 10 years by nf_prt.

If you want, google the concept of “https everywhere” — the idea is that as the web moves to mobile everything as the “main” daily driver, it needs to be secure since it’s “over the air” — so, somebody sitting in a café, in the break room, on the bus, isn’t been spied upon. So, the push for “https everywhere” is to make the connections from mobile devices to web properties more secure, and enforce encrypted connections, while also deprecating insecure SSL technologies like SSL3/TLS1/TLS1.1 etc. — so, Google is giving a ranking boost for mobile rankings for https *NOW* as they do for mobile speed and mobile compatibility/UX/speed.

It’s not a huge ranking factor, but it *is* a mobile ranking factor *now* and so it’s something to think about, but ideally in 3 years it is likely to be a semi-mandatory thing. The web needs to be secure, and hijacking is a big issue and “man in the middle” hacks are also common with wireless/wifi, etc. — this is how hotels can overlay ads on your mobile connection (!).

So … I would say, for a major business portal it’s good to go https now. If you have huge traffic and make your living on your website, then now is good time to start. If you have a blog on the side, not so much.

Part of the push for “https everywhere” is also to find a solution for free/zero cost/shared SSL certificate tech — which is coming into being and is “transitional” — shared SSL certs on servers are a new thing, but not fully supported in browsers YET.

If you can afford $25 a year for cheap SSL cert for your site, it’s worth doing. If you don’t make any money from your site, wait for the free or “included with hosting” SSL certs which should be in play by end of NEXT year.

And to be clear — the only site we chose to do this on is our MAIN business site, which has been online over 15 years and which generates 90% of our income. Our news portals are not yet https, although the web server on which they reside does have SSL cert itself. Our sites running tagdiv themes are NOT yet SSL, and will not be until the whole concept of zero cost / low cost SSL certs becomes available as part of this “movement.”

For our main site we got a wildcard SSL cert so we could also make subdomains SSL, which needed to happen for our local image server and our shortcode (YOURLS) system.

• This reply was modified 10 years by simchris.
• This reply was modified 10 years by simchris.
• This reply was modified 10 years by simchris.

Hi guys,

nice topic, I’ve been trying to learn more about it.

When you guys say “move to https” do you mean that your website will be exclusively https and http will no longer be available?

I did nothing like you and so I’m a bit apprehensive, although my point in having https was to “secure” just a small part of the site like wp-admin, logins and the store.

I did not change WP_HOME/SITEURL, just added define(‘FORCE_SSL_ADMIN’, true), so I guess wordpress is oblivious to connection. WP supercache creates static pages for https as well and performance seems unaffected. Site operates apparently well: I’m on http, click the login link and it goes https, I login and it throws me back to http afterwards. I browse the site, it stays http, and if I click in the edit my profile link for example, it switches me back to https, login session is always kept.

No mixed contents so far, padlock goes green. I plan to move my images to a subdomain and the SSL certificate only covers the domain. Tested a redirect from subdomain to domain folder and the padlock was green too. I also use cloudflare in strict mode: server <ssl> cloudflare <ssl> user

Ranking in google looked the same to me, it’s a fairly new site and it was growing slowly but steadily and still is. I ranked a few 1st places (regionally) in small subjects and even ranked a major one recently!

Again, as I know little about this and I’m probably doing big time shit, google tried to sort things out. It doesn’t rank both versions of the site, it chooses one. Everything’s http, except for the homepage and what google thinks its sensitive, like the wc cart page for example. Curiously, I have a page called “online reservations”, no online reservations are made whatsoever it’s just an article about it. Google ranks it https :). And google mix those because, regionally, my site gets that submenu under the search result and those sub-entries are either http or https accordingly to google’s criteria.

Cart page is fine and all that but I think I’d rather have the home page raking as http. Should I use a redirect or use webmastertools to exclude https version?

Any notes on this will be highly appreciated, it’s a topic I’m pretty noob at and we gotta learn everyday, thanks guys!

Cheers

Awesome search engine called google, ironically 😉

http://jquery.com/ >> http://jquery.com/browser-support/

https://developers.google.com/speed/libraries/#jquery

I would not worry too much about IE7 or WinXP at this point as that browser is so insecure that pretty much the bulk of the web is starting to kill any support for it; especially SSL connections since SSL2/SSL3, TLS1 are all insecure. Of course some folks want to keep legacy support for the old folks. However, as web heads toward “https everywhere” the oooold browsers simply will not work with TLS 1.2+ connections, probably.

Jquery 2x only works with IE9+.

Hope that helped 🙂

I went through this last year when moving our main business site to “all https all the time” on Dec. 1, 2014, and making the jquery connection https, then deciding to load it locally for speed/caching locally.

Testing your site in old browsers:
The modern.IE site makes available virtual machines for testing many different versions of Internet Explorer. Older versions of other browsers can be found at oldversion.com. https://dev.modern.ie/tools/vms/windows/

Hi,

Even after getting rid of the code you asked for, Google is indexing another image.

https://www.google.co.uk/search?hl=en&gl=us&tbm=nws&authuser=0&q=site%3Atechienews.co.uk&oq=site%3Atechienews.co.uk&gs_l=news-cc.3..43j43i53.695974.698893.0.699045.21.6.0.15.0.0.187.685.2j4.6.0…0.0…1ac.1.c14gcHT8Bxo&gws_rd=ssl#q=site:techienews.co.uk&hl=en&gl=us&authuser=0&tbm=nws&start=0

The article which I wrote after the deletion of the code is this:
Lyme disease concern: Canadians likely to get false-positives from some US labs

If you check the indexing, the image is of ‘salt’ while the actual image should be of ‘Lyme disease’ as in the article:
http://www.techienews.co.uk/9740327/lyme-disease-concern-canadians-likely-to-get-false-positives-from-some-us-labs/

Here is the example. Below is the way in which google has indexed a particular article: “Brace yourself for wasp invasion in September, garden centre warns”. The image is of marijauna but it should have been of a wasp.

https://www.google.co.uk/search?hl=en&gl=us&tbm=nws&authuser=0&q=site%3Atechienews.co.uk&oq=site%3Atechienews.co.uk&gs_l=news-cc.3..43j43i53.695974.698893.0.699045.21.6.0.15.0.0.187.685.2j4.6.0…0.0…1ac.1.c14gcHT8Bxo&gws_rd=ssl#q=site:techienews.co.uk&hl=en&gl=us&authuser=0&tbm=nws&start=0

If you go to the article, you will see that the image displayed is correct one:
http://www.techienews.co.uk/9740267/brace-yourself-for-wasp-invasion-in-september-garden-centre-warns/

I installed this plugin video-thumbnails

It does what NP6.4 theme does for video post types. The differences are it does it for every post type and it doesn’t have a box to input the video’s url. It scans the post content and grabs the first url of a video, fetch the thumbnail and set it as featured image.

This is nice because it won’t interfere with the theme video post type, since in those custom post you put the video url in the box and not in the content, the plugin wont scan any video and the theme will keep working as intended.

So, 1st step is install plugin, 2nd is to make the theme know there’s a video in the post.

Fortunately, the plugin has a function for this so you just need to add it to the theme. Edit the following file:
/public_html/wp-content/themes/Newspaper/includes/wp_booster/td_module.php
lines 282 and 283 should be like this (NP6.4)
// on videos add the play icon
if (get_post_format($this->post->ID) == 'video') {


replace with:
// on videos add the play icon
if (get_post_format($this->post->ID) == 'video' || get_video_thumbnail($this->post->ID) != null) {


Done!

It should work flawlessly, sometimes I use the theme video post type which is awesome and other times I paste a video in a regular post, sometimes just to have a thumbnail 🙂
The plugin doesn’t trigger if you (only) use the theme video playlist because the shortcode only has video id’s and not urls.
You can simply paste a link to a video, it will work but those links can show up in excerpts, so use [embed][/embed] if the video url is the 1st thing in the post content or comes before the excerpt length you have defined at the theme’s panel.

Hope it hepls, cheers!

Hi

The theme doesn’t have an option for a subscription form, but you could try to find a plugin to achieve that. There are lots of plugins for this purpose, but we didn’t tested any plugins of this type so I cannot recommant you one which will work flawlessly. You can try one like Mail Chimp: http://mailchimp.com/

Thanks!

I had to do this recently and there are several things you can do

a) in your wp-config.php file add the express link to your site with https; this helps WP know “everything” should be https; WP should then in most cases do a 301 redirect for you. Should fix canonical issues, too.

e.g.,

define('WP_HOME', 'https://site.com');
define('WP_SITEURL', 'https://site.com');

Be sure to use either www or without www — and only do that ONE way, not both! Some SSL setups require the www.

b) you can edit your content via phpmyadmin to do a search replace for all images and internal links using http://mysite to https://mysite — as those are hard-coded in the text and no way to automagically change them. Dbase search/replace best way.

there are tools to do this such as the WP CLI plugin:
http://wp-cli.org/commands/search-replace/

c) ideally you may need to add a 301 redirect for “any” request made to site to serve only the https version so you don’t have two versions of site being served.

• This reply was modified 10 years by simchris.
• This reply was modified 10 years by simchris.