Search Results for 'ssl'

For 3)
use the phpmyadmin on server — or other tool to search the table for your posts, to replace http://yoursite.com/uploads/* with https://yoursite.com/uploads/* or similar. You will need to find other help on HOW to do that specifically, as I don’t have the proper instructions handy now. (sorry)

4 …

good idea to read the WordPress docs/codex on setting up the wp-config.php file and optimizations, like removing the comments (!), and setting /paths/to/theme/folder explicitly on the server

see: – advanced options section
http://codex.wordpress.org/Editing_wp-config.php

define('WP_HOME', 'https://www.SITE.com');
define('WP_SITEURL', 'https://www.SITE.com');

define('TEMPLATEPATH', '/var/www/vhosts/SITE.com/httpdocs/wp-content/themes/Newspaper');
define('STYLESHEETPATH', '/var/www/vhosts/SITE.com/httpdocs/wp-content/themes/Newspaper');

define( 'FORCE_SSL_ADMIN', true );

adjust paths for your server …

anyway… that’s what I did 🙂

Thanks a lot for your replies, now it seems like I’ll have more 1 or 2 days without ssl 😛

3. If you are going to do that, use a tool like this: https://interconnectit.com/products/search-and-replace-for-wordpress-databases/ Simply replacing it via a simple query can break serialized arrays.

If you have any links that aren’t local, this will also break them, as I’m sure you’re aware. A link to a Microsoft press release, for example. You can avoid that result by excluding the wp_posts table or even the content column (I forget its exact name) in that tool. I think that’s where you’d probably have most such links.

Template files would not be affected by a db query.

In future, I would try to make as many internal links as you can relative, i.e. instead of “http://styzic.com/my/page”, just “/my/page”. Makes things like this much easier. But some of the settings Chris mentioned obviously can’t be relative.

Thanks Chris 🙂

3. Can i do it by changing “http://” to “https://” with sql query?
4. I don’t get u 😛

Only stuff I’ve had to deal with are:

1) setting site URL in the WP settings to https
2) reset logos in panel to https://
3) search/replace dbase to set any “placed” images to https vs http (e.g., if you place an image in middle of post using media manager, it is “in the text” as http … that’s part of the body post, and doesn’t update
4) consider setting /paths/to/ in the wp-config.php to optimize that

Any placed local ads or graphics in widgets also need https: obviously

You can still use CloudFlare just don’t use there “CDN service” but there is a lot more nice features that come with them,this week they giving FREE SSL Certificate to every one site that use they service..

The team at CloudFlare is excited to announce the release of Universal SSL™. Beginning today, we will support SSL connections to every CloudFlare customer, including the 2 million sites that have signed up for the free version of our service.

For all customers, we will now automatically provision a SSL certificate on CloudFlare’s network that will accept HTTPS connections for a customer’s domain and subdomains. Those certificates include an entry for the root domain (e.g., example.com) as well as a wildcard entry for all first-level subdomains (e.g., http://www.example.com, blog.example.com, etc.).

For a site that did not have SSL before, we will default to our Flexible SSL mode, which means traffic from browsers to CloudFlare will be encrypted, but traffic from CloudFlare to a site’s origin server will not. We strongly recommend site owners install a certificate on their web servers so we can encrypt traffic to the origin.

Later today we’ll be publishing a blog with instructions on how to do that at no cost. Once you’ve installed a certificate on your web server, you can enable the Full or Strict SSL modes which encrypt origin traffic and provide a higher level of security.

Hello Christopher,

For my images i have a SSL CDN for all my content including pictures, so size should’t matter too much but i still optimise my images, just in case.

I have WordPress register turned off, and have no forums on my website. The only accounts on my WordPress website are for editors only.

Your sitemap example is very interesting, so i’ll have to look into this and see if i have multiple plugins doing the same thing.

Thanks for the tips, i will check out the compatibility of my plugins and deactivate the ones that have large load times (listed above in previous post on this topic).

One big post to rule them all…that would be awesome! (and very helpful)

I feel your pain. Had to do a server migration recently, as well. Looks like Centmin Mod Nginx SSL + SPDY will be my next big project.

We had good luck with Amazon’s CDN; but in our case we have a very powerful brand new web server, dedicated switch in class A datacenter, so we’re finding a “balance” of what to use the CDN for. In our case, in process of migrating everything to https/SSL so right now we’re loading everything locally.

Obviously, for any website, it’s very much a trial and error process. 🙂

You need to contact your web hosting provider as the php.ini file sits “above” your account; meaning it’s not part of the public root which is normally seen via FTP. Depending on your web hosting account type, you may be able to change that setting under your web hosting control panel. See the help info for your hosting account on how to edit hosting settings; it’s generally on the same screen where you would set things like an SSL cert, memory limit, and the like. It’s not part of WordPress or the theme.

I used this, but not work after update

.iosSlider .entry-thumb {
width: 745px;
}
.iosSlider .td-slide-item-main .entry-thumb {
width: 100%;
}

-VK

I have the same issue with relevance; maybe someday the theme could implement the relation-finders of other plugins that do the job, like YARPP, the way it works seamlessly with those avatar plugins…

Stupid thing about it, is the og tags are expressly there for Facebook to be able to grab the image.

Worth mentioning you need to ensure your robots.txt file isn’t blocking the /uploads/ folder or other folder if you renamed yours (I renamed mine as I hate “uploads”).

Also, would changing the function in the get-admin-URL disable the “force admin over ssl option? Where would I change this (what files)?

Thanks. I like the second option better.

Can I get a confirmation from tagdiv that this won’t mess anything up with the theme?

Also, can we get this fixed in the next version? Having admin over SSL is a secure option that most people should be using especially if they use public wifi.

Thanks!

Thanks Shashank.

I just noticed that when I go to https://www.OralAnswers.com then AJAX works, but it doesnt work at the non-secure site.

I do have the WordPress option “Force SSL Admin” enabled in my wp-config file.

Do you know how to fix this? How do I add the Access Control Allow Origin header? Thanks!

Author rank with rel=author is 100% dead. 🙂

The theme supports various schema.org markup, and the latest (brand new this week) version of YOAST SEO has whole bunch of added support for microformat data but I’ve not had a big block of time to dive into that in depth. It’s on my to do list, actually, for this coming week 🙂

Right now I’m in midst of playing with mod_spdy and a new wildcard SSL cert, and connecting that to mod_pagespeed correctly (waaaah).

Well, on my site I have it set to upscale proportionally…. so everything goes “up” in scale properly. It makes larger images to scale, it doesn’t stretch them in only one direction. You may need to “regenerate thumbnails” once you install the plugin. I use it on numerous websites both with and without the Newspaper theme, works flawlessly.

You may have to se the “crop image” function in the Newspaper theme panel.

Hi christopher. Thanks for the wonderful information and support. I today purchased SSL certificate from comodo and passed the keys to my host synthesis. I also confirmed them about mod_spdy and they will activate the module as well.

I am little bit confused about the http to https redirection after reading the above post link you provided. Please guide me which is the best practice to handle https redirection.

Further, how can i handle it.

<script type='text/javascript' src='http://ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js'></script>

to

<script src="//ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js"></script> 
or
<script src="//ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js"></script>

Please guide me if i need to take any necessary steps. Thanks a lot.

Once i have everything optimized for ssl i will pass along my adventures…

In meantime for those curious this has some good info…
http://serverfault.com/questions/570288/is-it-bad-to-redirect-http-to-https

Check the entire site for internal links and ensure they are all using HTTPS if you specific your own domain name in links, so you are not causing your own redirects.
Update your <meta property=”og:url” to using the https version of your domain.
If you use <base href= again update to use HTTPS.
Install SPDY protocol if possible
Make sure to use CSS Image sprites where possible, to reduce numbers of request.
Update your sitemaps to indicate https status, so spiders over time learn this change.
Change Search Engine preferences like Google Webmaster Tools to prefer HTTPS
Where possible off-load any stactic media to HTTPS CDN servers.

• This reply was modified 11 years by simchris.