Did you change ur URL in WP General Settings,because i had to go in there and set both from http to https to make it don’t give me a loop..
After you get it work you have to go in ur google tools and remove ur site and add it back with the https in this way google bot will hit https instead of http and you have to do that with all ur engines msn as well..
My site is working all over with https,even my sitemap
I too did the same things you did but somehow it get a redirect loop, going to try in a fresh install.
Actually … if I may chime in …
if you use my trick to edit the wp-config.php file, as I suggested, to put in the directive to state the site is https:// you don’t need to do any redirect as WordPress will do that automatically as a redirect for http:// requests. QED.
For instance this also fixes it so that when you go to
WP admin > settings > general settings –
the URL will now show https://yoursite
You can see this “in action” where I did this last week here:
http://www.send2press.com/guru/
note the soft redirect to https, with the theme (I think this is v4.2.2)
ALSO: Google *does* want the ENTIRE site to be https, not just the home page. The idea is to make the web more “trusted” with encrypted connections.
So, if you have a service information page on your site, that needs to be https also. The idea being for a ranking signal, that if you and your competitor both have the same perceived value, if one is https and one is http, the https site will rank a dot higher.
To properly secure your site you do need an SSL certificate installed on your domain. A self-signed cert “might” work for Google’s purposes, but this has not yet been fully acknowledged, although mod_pagespeed does support self-signed certs for pulling http content over https, although we’re doing it using the static paths method.
@Christopher is there any easy way to make all featured images from http to https..i have to make all mine do this but can’t seem to figure out a easy way besides changing each image url
Yes, you do want it to redirect from http to https; that’s the idea.
You may get a loop if your site isn’t actually setup for https with an SSL cert.
I see you have it turned off now.
Nevermind i just had to cache the site..every thing is over SSL now even the images..
featured images would change to https; but anything “placed” into a post, you’d have to do search/replace in the dbase, as was discussed earlier in the thread.
I’ve already changed everything to https but I can not do the site! :'(
As soon as I change the settings I get redirect loop. Any body wants to get in my host and try? 🙁
@Shashank Shekhar see if anything from this link can help you..
https://support.cloudflare.com/hc/en-us/articles/200170566-My-SSL-isn-t-working-Why-not-
I don’t use cloudflare so not much help, sorry.
Guys you are not understanding it!
If I visit my site with https ( https://www.styzic.com ) it works fine but as soon as I change the site url in wordpress settings (or try the HTTPs Plugin, as suggested by @Steven) I start getting redirect loop.
Currently I have http://www…. in my wordpress settings. I don’t know what happens when I change the two urls in settings to https.
I have already tried deleting all plugins 🙁 and @Chris it has nothing to do with cloudflar, it’s a problem in wordpress!
Put this in ur wp-config file on the top after php..
Your server is behind a load balancer or reverse proxy.
Please add the following code to your wp-config.php file, above the require_once:
if (isset($_SERVER[‘HTTP_X_FORWARDED_PROTO’]) && $_SERVER[‘HTTP_X_FORWARDED_PROTO’] == ‘https’)
$_SERVER[‘HTTPS’]=’on’;
and try again,i’m using this code because i’m on CF servers and before that code i had the same problem as you with all the loops to i was lock out of my site..had to go in cpanel and change my urls back to even have access back to my site..
If this don’t work for u then i really don’t know what else too tell you,to set up the SSL with CF is very easy on your end…
Hey that worked, love and thanks 🙂
What work..
Now i see the loops stop,but you have things too fix to get that green lock
The page at ‘https://www.styzic.com/windows-10-start-menu-responsive/977/’ was loaded over HTTPS, but displayed insecure content from ‘http://www.styzic.com/uploads/extras/StyZic-Icon.png’: this content should also be loaded over HTTPS.
(index):52
The page at ‘https://www.styzic.com/windows-10-start-menu-responsive/977/’ was loaded over HTTPS, but displayed insecure content from ‘http://www.styzic.com/uploads/extras/StyZic-Icon.png’: this content should also be loaded over HTTPS.
(index):78
The page at ‘https://www.styzic.com/windows-10-start-menu-responsive/977/’ was loaded over HTTPS, but is submitting data to an insecure location at ‘http://feedburner.google.com/fb/a/mailverify’: this content should also be submitted over HTTPS.
Your code @Steven
This one
if ( isset($_SERVER['HTTP_X_FORWARDED_PROTO']) && $_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https' )
$_SERVER['HTTPS']='on';Check again, fixed the mixed content warning 🙂
Now I just need to change the image urls in posts!
This plugin as follow will help fix some of those
https://wordpress.org/plugins/ssl-insecure-content-fixer/
Your logo go and add https in the logo url in theme settings
Thanks a lot Steven, and I use console too.
Ur welcome and have a great day.. 🙂
Going to remove cloudflare ssl, it does not supports all browsers and decreased my traffic.
Well the browsers it don’t support is old ones…if you want to support all browers then you need a to upgrade your Free account to a PRO / BUSINESS / ENTERPRISE..
the Free plan only support
Desktop Browsers
Internet Explorer 7 and later
Firefox 2
Opera 8 with TLS 1.1 enabled
Google Chrome:
Supported on Vista and later by default
OS X 10.5.7 in Chrome Version 5.0.342.0 and later
Safari 2.1 and later (requires OS X 10.5.6 and later or Windows Vista and later)
Mobile Browsers
Mobile Safari for iOS 4.0
Android 3.0 (Honeycomb) and later
Windows Phone 7
This a free service and so far they support a lot of browers just not the old ones like Windows XP SP2 and Android <3.0,
And it’s good it don’t support old browsers because that’s what hackers and scammers etc use any way to get in ur site..
Yep but as of now, I’m not using it and I’ll upgrade soon 🙂
<LOL>
hackers don’t use WinXP to get into your site, they use vulnerabilities on the server, the plugins and issues with WordPress. XP doesn’t have any special power to bypass server security tech.
