• Resolved batman42ca

    (@batman42ca)


    I see the login form action is posting to wp-login.php but it’s doing it via http. The page where I’ve placed the Profile Builder login form is on an https secured page. This causes the following warning:

    Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.

    Profile Builder used to post the login form to “” so it wasn’t a problem for older versions of the plugin.

    https://www.ads-software.com/plugins/profile-builder/

Viewing 8 replies - 1 through 8 (of 8 total)
  • Thread Starter batman42ca

    (@batman42ca)

    My problem runs a little deeper than I thought. Profile Builder posts the login form to wp-login.php but I’m not being logged in. I’m simply presented with the empty WordPress login form rendering the Profile Builder login form no better than a simple link to wp-login.php. Have I misconfigured something? Should posting the Profile Builder form to wp-login automatically log me in or should the form not be posted there to begin with?

    Thread Starter batman42ca

    (@batman42ca)

    Although not ideal, I have a temporary solution to my problem.

    I used javascript to alter the action of the Profile Builder login form to post to https instead of http, and then I used a plugin to force the WordPress admin pages to use https.

    Plugin Author Cristian Antohe

    (@sareiodata)

    Hm. We’re now using wp_login_form for the login.

    That shouldn’t happen as the action is now filled with:

    esc_url( site_url( 'wp-login.php', 'login_post' )

    This means, your site_url function doesn’t return https so you have another problem which is not 100% related to Profile Builder.

    Try and activate one of those HTTPS plugins and see if that helps.

    Thread Starter batman42ca

    (@batman42ca)

    Thanks but where is that call being made? I’ve searched all the Profile Builder .php files but I don’t see that code anywhere. I’m using version 2.08.

    I searched for esc_url, I also searched for wp-login.php and did not find the code you quoted.

    Note that there are still places where http is hard coded. For example. I see the following on line 138 and 178 of class-formbuilder.php

    $redirect_location = ( wppb_check_missing_http( $this->args['redirect_url'] ) ? 'https://'.$this->args['redirect_url'] : $this->args['redirect_url'] );

    $location = ( wppb_check_missing_http( $this->args['redirect_url'] ) ? 'https://'.$this->args['redirect_url'] : $this->args['redirect_url'] );

    Plugin Author Cristian Antohe

    (@sareiodata)

    > Thanks but where is that call being made? I’ve searched all the Profile Builder .php files but I don’t see that code anywhere. I’m using version 2.08.
    Search for wp_login_form. That’s the function we’re using. It’s a default WordPress function.

    > Note that there are still places where http is hard coded. For example. I see the following on line 138 and 178 of class-formbuilder.php
    That only happens if you don’t have a https:// in your redirect URL as a backup (in case people use https://www.sitename.com instead of https://www.sitename.com )

    Thread Starter batman42ca

    (@batman42ca)

    I think I just realized the cause of my problem. My entire site is not https. Only a few select pages are https, so site_url() (which I suspect comes from the database) will correctly return “https://something” even though the page on which the login form exists is “https://something”.

    I now think this is actually a subtle WordPress bug. The solution is to do what I already did, or run the entire site under https.

    Thanks for your help.

    Warning: include_once(/home/u299078322/public_html/wp-content/plugins/profile-builder/assets/lib/wck-api/wordpress-creation-kit.php): failed to open stream: No such file or directory in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 117 Warning: include_once(): Failed opening ‘/home/u299078322/public_html/wp-content/plugins/profile-builder/assets/lib/wck-api/wordpress-creation-kit.php’ for inclusion (include_path=’.:/usr/lib/php’) in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 117 Warning: include_once(/home/u299078322/public_html/wp-content/plugins/profile-builder/features/upgrades/upgrades.php): failed to open stream: No such file or directory in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 118 Warning: include_once(): Failed opening ‘/home/u299078322/public_html/wp-content/plugins/profile-builder/features/upgrades/upgrades.php’ for inclusion (include_path=’.:/usr/lib/php’) in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 118 Warning: include_once(/home/u299078322/public_html/wp-content/plugins/profile-builder/features/functions.php): failed to open stream: No such file or directory in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 119 Warning: include_once(): Failed opening ‘/home/u299078322/public_html/wp-content/plugins/profile-builder/features/functions.php’ for inclusion (include_path=’.:/usr/lib/php’) in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 119 Warning: include_once(/home/u299078322/public_html/wp-content/plugins/profile-builder/features/email-confirmation/email-confirmation.php): failed to open stream: No such file or directory in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 125 Warning: include_once(): Failed opening ‘/home/u299078322/public_html/wp-content/plugins/profile-builder/features/email-confirmation/email-confirmation.php’ for inclusion (include_path=’.:/usr/lib/php’) in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 125 Warning: include_once(/home/u299078322/public_html/wp-content/plugins/profile-builder/features/email-confirmation/class-email-confirmation.php): failed to open stream: No such file or directory in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 126 Warning: include_once(): Failed opening ‘/home/u299078322/public_html/wp-content/plugins/profile-builder/features/email-confirmation/class-email-confirmation.php’ for inclusion (include_path=’.:/usr/lib/php’) in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 126 Warning: include_once(/home/u299078322/public_html/wp-content/plugins/profile-builder/features/login-widget/login-widget.php): failed to open stream: No such file or directory in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 131 Warning: include_once(): Failed opening ‘/home/u299078322/public_html/wp-content/plugins/profile-builder/features/login-widget/login-widget.php’ for inclusion (include_path=’.:/usr/lib/php’) in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 131 Fatal error: Class ‘WCK_Page_Creator_PB’ not found in /home/u299078322/public_html/wp-content/plugins/profile-builder/admin/manage-fields.php on line 20

    PLese help me Ican’t go to dashboard

    Plugin Author Cristian Antohe

    (@sareiodata)

    @rotnokothok this looks like the update of the plugin didn’t happen correctly or the plugin didn’t install correctly.

    Connect via FTP and navigate to wp-content/plugins/profile-builder.

    Then download and overwrite all files in that directory with the latest version of Profile Builder from: https://downloads.www.ads-software.com/plugin/profile-builder.2.1.0.zip

    Let me know if this solves it.

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘login posts to wp-login.php via http but need https’ is closed to new replies.