Wrong HTTP/HTTPS protocol used for “Problems found” email

  • Using WP 5.3.1 and WF 7.4.2, I am receiving “[Wordfence Alert] Problems found on …” emails containing links to my websites using the incorrect protocol. Links that should be HTTP are often listed with HTTPS:

    See the details of these scan results on your site at: https://…/wp-admin/admin.php?page=WordfenceScan

    There seems to be no pattern for which sites produce this bug or when it happens. Seems to be random.

    With these emails coming in almost daily, it can be tedious manually correcting these links when accessing my sites to address the issues that Wordfence has identified. Is this an easy fix?

Viewing 4 replies - 1 through 4 (of 4 total)

  • Hey @spinfly,

    Do you have the protocols correctly defined your wp-config.php file?

    define( 'WP_SITEURL', 'https://example.com/wordpress' );

    https://www.ads-software.com/support/article/editing-wp-config-php/#wp_siteurl

    Thanks,

    Gerroald

    Thread Starter spinfly

    (@spinfly)

    No, but is that really necessary?

    For all my sites, the WordPress Address (URL) and Site Address (URL) are correctly defined (with the correct protocols) on the WP settings pages:

    /wp-admin/options-general.php

    Hi @spinfly,

    Wordfence keeps the home and site urls saved in its own database tables. There’s a chance that when it initially saved these two values, it saved it with https:// instead of https://.

    Can you check if this is the case by running the following query?

    SELECT * from wp_wfconfig WHERE name="wp_site_url" OR name="wp_home_url";

    If indeed these rows begin with https:// you can update these values by running:

    UPDATE wp_wfconfig SET val="https://your-site-url-here" WHERE name="wp_site_url";
UPDATE wp_wfconfig SET val="https://your-home-url-here" WHERE name="wp_home_url";

    Remember to change https://your-site-url-here and https://your-home-url-here.

    Dave

    Thread Starter spinfly

    (@spinfly)

    That query returns 2 BLOBs, so I changed the query to this:

    SELECT *, CONVERT(val USING utf8) from wp_wfconfig WHERE name="wp_site_url" OR name="wp_home_url";

    It indeed showed that https:// is saved for both values. Yet I am positive that some of my emails contained a link with https://

    • This reply was modified 5 years, 2 months ago by spinfly.
Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Wrong HTTP/HTTPS protocol used for “Problems found” email’ is closed to new replies.