Really simple captcha breaking SSL secure connection

  • Hello,

    I recently set up a form on a new website which uses an SSL certificate. The form is secure until I try and submit anything. I’m getting the following error once the submission is made:

    The page at 'https://XXXXX/contact/' was loaded over HTTPS, but displayed insecure content from 'https://XXXXX/wp-content/uploads/wpcf7_captcha/XXXXXXXXX.png': this content should also be loaded over HTTPS.

    Is there any way to fix this? I’d like the whole journey to be secure for the user.

    Thanks

    Ox

    https://www.ads-software.com/plugins/contact-form-7/

Viewing 12 replies - 1 through 12 (of 12 total)

  • I’m interested to hear about this too…

    Thread Starter Sam Kent

    (@oxocube)

    Add the following to functions.php in your theme ??

    // Force SSL on form captcha
define('WPCF7_CAPTCHA_TMP_URL','https://www.yourwebsite.co.uk/wp-content/uploads/wpcf7_captcha');

    Ox

    great thanks Ox, I’ll get that added ??

    Thread Starter Sam Kent

    (@oxocube)

    No worries!

    Happy Friday.

    I just tried to implement this and it still loads on http, I’ve cleared cache, restarted browser etc and still no joy.

    Thread Starter Sam Kent

    (@oxocube)

    Can you confirm which plugin you’re using to implement HTTPS?

    Cheers

    Ox

    Well I have my site urls set as https and also have wordpress https running, maybe I have a setting wrong in there as some pages are definitely not being forced into https.

    I always assumed if you had site urls fixed as https that would force all pages to https on its own?

    Thread Starter Sam Kent

    (@oxocube)

    Good to hear that you’re using the WordPress HTTPS plugin.

    The problem may lie in you forcing SSL on every page. Within the plugin settings it says:

    Any page that is not secured via Force SSL or URL Filters will be redirected to HTTP.

    Try and un-tick this option and specify the form page in “URL filters” i.e. /contact.

    See if that does the trick.

    Ox

    Hi Ox,

    sorry for delay, I just checked and that setting is already unchecked. I will try and specify the page as you suggest.

    Thanks for the help

    Thread Starter Sam Kent

    (@oxocube)

    No worries buddy. If that doesn’t work, I’m not sure what else you can do.

    Best of luck and have a good weekend!

    Ox

    I was able to get this working by implementing the fix described in this post.

    https://www.ads-software.com/support/topic/wp_content_url-based-defines-do-not-work-over-ssl-https

    Essentially, I edited wp-includes/default-constants.php and changed the wp_plugin_directory_constants function as follows:

    function wp_plugin_directory_constants( ) {
/**
        if ( !defined('WP_CONTENT_URL') )
                define( 'WP_CONTENT_URL', get_option('siteurl') . '/wp-content'); // full url - WP_CONTENT_DIR is defined further up
**/
        if ( !defined('WP_CONTENT_URL') )
                define( 'WP_CONTENT_URL', site_url( 'wp-content') ); // full url - WP_CONTENT_DIR is define with https or http per connection

    Hopefully this will be helpful to others.

Viewing 12 replies - 1 through 12 (of 12 total)
  • The topic ‘Really simple captcha breaking SSL secure connection’ is closed to new replies.

Tags