login posts to wp-login.php via http but need https
-
I see the login form action is posting to wp-login.php but it’s doing it via http. The page where I’ve placed the Profile Builder login form is on an https secured page. This causes the following warning:
Although this page is encrypted, the information you have entered is to be sent over an unencrypted connection and could easily be read by a third party.
Profile Builder used to post the login form to “” so it wasn’t a problem for older versions of the plugin.
-
My problem runs a little deeper than I thought. Profile Builder posts the login form to wp-login.php but I’m not being logged in. I’m simply presented with the empty WordPress login form rendering the Profile Builder login form no better than a simple link to wp-login.php. Have I misconfigured something? Should posting the Profile Builder form to wp-login automatically log me in or should the form not be posted there to begin with?
Although not ideal, I have a temporary solution to my problem.
I used javascript to alter the action of the Profile Builder login form to post to https instead of http, and then I used a plugin to force the WordPress admin pages to use https.
Hm. We’re now using wp_login_form for the login.
That shouldn’t happen as the action is now filled with:
esc_url( site_url( 'wp-login.php', 'login_post' )
This means, your site_url function doesn’t return https so you have another problem which is not 100% related to Profile Builder.
Try and activate one of those HTTPS plugins and see if that helps.
Thanks but where is that call being made? I’ve searched all the Profile Builder .php files but I don’t see that code anywhere. I’m using version 2.08.
I searched for esc_url, I also searched for wp-login.php and did not find the code you quoted.
Note that there are still places where http is hard coded. For example. I see the following on line 138 and 178 of class-formbuilder.php
$redirect_location = ( wppb_check_missing_http( $this->args['redirect_url'] ) ? 'https://'.$this->args['redirect_url'] : $this->args['redirect_url'] );
$location = ( wppb_check_missing_http( $this->args['redirect_url'] ) ? 'https://'.$this->args['redirect_url'] : $this->args['redirect_url'] );
> Thanks but where is that call being made? I’ve searched all the Profile Builder .php files but I don’t see that code anywhere. I’m using version 2.08.
Search for wp_login_form. That’s the function we’re using. It’s a default WordPress function.> Note that there are still places where http is hard coded. For example. I see the following on line 138 and 178 of class-formbuilder.php
That only happens if you don’t have a https:// in your redirect URL as a backup (in case people use https://www.sitename.com instead of https://www.sitename.com )I think I just realized the cause of my problem. My entire site is not https. Only a few select pages are https, so site_url() (which I suspect comes from the database) will correctly return “https://something” even though the page on which the login form exists is “https://something”.
I now think this is actually a subtle WordPress bug. The solution is to do what I already did, or run the entire site under https.
Thanks for your help.
Warning: include_once(/home/u299078322/public_html/wp-content/plugins/profile-builder/assets/lib/wck-api/wordpress-creation-kit.php): failed to open stream: No such file or directory in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 117 Warning: include_once(): Failed opening ‘/home/u299078322/public_html/wp-content/plugins/profile-builder/assets/lib/wck-api/wordpress-creation-kit.php’ for inclusion (include_path=’.:/usr/lib/php’) in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 117 Warning: include_once(/home/u299078322/public_html/wp-content/plugins/profile-builder/features/upgrades/upgrades.php): failed to open stream: No such file or directory in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 118 Warning: include_once(): Failed opening ‘/home/u299078322/public_html/wp-content/plugins/profile-builder/features/upgrades/upgrades.php’ for inclusion (include_path=’.:/usr/lib/php’) in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 118 Warning: include_once(/home/u299078322/public_html/wp-content/plugins/profile-builder/features/functions.php): failed to open stream: No such file or directory in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 119 Warning: include_once(): Failed opening ‘/home/u299078322/public_html/wp-content/plugins/profile-builder/features/functions.php’ for inclusion (include_path=’.:/usr/lib/php’) in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 119 Warning: include_once(/home/u299078322/public_html/wp-content/plugins/profile-builder/features/email-confirmation/email-confirmation.php): failed to open stream: No such file or directory in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 125 Warning: include_once(): Failed opening ‘/home/u299078322/public_html/wp-content/plugins/profile-builder/features/email-confirmation/email-confirmation.php’ for inclusion (include_path=’.:/usr/lib/php’) in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 125 Warning: include_once(/home/u299078322/public_html/wp-content/plugins/profile-builder/features/email-confirmation/class-email-confirmation.php): failed to open stream: No such file or directory in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 126 Warning: include_once(): Failed opening ‘/home/u299078322/public_html/wp-content/plugins/profile-builder/features/email-confirmation/class-email-confirmation.php’ for inclusion (include_path=’.:/usr/lib/php’) in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 126 Warning: include_once(/home/u299078322/public_html/wp-content/plugins/profile-builder/features/login-widget/login-widget.php): failed to open stream: No such file or directory in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 131 Warning: include_once(): Failed opening ‘/home/u299078322/public_html/wp-content/plugins/profile-builder/features/login-widget/login-widget.php’ for inclusion (include_path=’.:/usr/lib/php’) in /home/u299078322/public_html/wp-content/plugins/profile-builder/index.php on line 131 Fatal error: Class ‘WCK_Page_Creator_PB’ not found in /home/u299078322/public_html/wp-content/plugins/profile-builder/admin/manage-fields.php on line 20
PLese help me Ican’t go to dashboard
@rotnokothok this looks like the update of the plugin didn’t happen correctly or the plugin didn’t install correctly.
Connect via FTP and navigate to wp-content/plugins/profile-builder.
Then download and overwrite all files in that directory with the latest version of Profile Builder from: https://downloads.www.ads-software.com/plugin/profile-builder.2.1.0.zip
Let me know if this solves it.
- The topic ‘login posts to wp-login.php via http but need https’ is closed to new replies.