is_ssl() says: no, SSL not detected

  • Hello!

    I have recently installed the plugin and added the code suggested into my wp-config.php file above require_once:

    /** SSL Redirection Plugin Dependency */
    if (isset($_SERVER[‘HTTP_X_FORWARDED_PROTO’]) && $_SERVER[‘HTTP_X_FORWARDED_PROTO’] == ‘https’)
    $_SERVER[‘HTTPS’]=’on’;

    /** Sets up WordPress vars and included files. */
    require_once(ABSPATH . ‘wp-settings.php’);

    When I run the test I’m still being told no,SSL not detected.

    I am using Cloudflare as my reverse proxy and signed up directly through their services. With this I’m also using their Flexible SSL plugin.

    No other caching plugins are enabled, however I am using Wordfence for security.

    Might anyone have any suggestions about things to try? Did I add the code wrong perhaps?

    If more information is needed to troubleshoot I’ll gladly provide further details.

    Thank you,

    Andrew W.

    https://www.ads-software.com/plugins/ssl-insecure-content-fixer/

Viewing 1 replies (of 1 total)
  • Plugin Author webaware

    (@webaware)

    G’day Andrew,

    For CloudFlare’s Flexible SSL, I think you need this instead:

    if (isset($_SERVER['HTTP_CF_VISITOR']) && strpos($_SERVER['HTTP_CF_VISITOR'], 'https') !== false) {
    $_SERVER['HTTPS'] = 'on';
}

    However: Flexible SSL is a really bad idea, because only the path from your website visitors to CloudFlare is encrypted; the path from CloudFlare to your website is unencrypted, and thus not a secure transport for stuff like credit card details and other sensitive information. Read this CloudFlare blog post about SSL for more information.

    A better idea is to make sure your website has an SSL certificate (even a self-signed one, or a generic one from your website host) and use CloudFlare’s Full SSL. You’ll find then that the issue goes away, and your traffic will be encrypted end-to-end.

    cheers,
    Ross

Viewing 1 replies (of 1 total)
  • The topic ‘is_ssl() says: no, SSL not detected’ is closed to new replies.