byoussin
Forum Replies Created
-
Forum: Fixing WordPress
In reply to: secure admin access on shared hostingWell, it works!
Here are the exact directions:
Install WordPress HTTPS (SSL) plugin.
In the HTTPS settings (usually accessed from the sidebar) fill SSL Host field in the General Settings:
your-shared-server-name.com/path-to-your-account
(ask all these from your hosting provider).
Press Save Changes.
DO NOT fill any domain mapping as SSL Host value already filled is enough for redirection and adding domain mapping got me 404.
Log out and go to https://your-shared-server-name.com/path-to-your-account/wp-admin
If you get your login page, successful! Try going around admin area to see that it works. You should see your server name and path to your acct all the time in the browser address.
At this point you have the possibility of secure login via the server address and your path, or insecure login by your domain name.
If everything is fine, go again to HTTPS settings and check Force SSL administration. This will block insecure login.
Done! (If locked out, go to Plugin FAQ for break-in directions.)
Good luck!Forum: Plugins
In reply to: [Blue Captcha] Changing the Captcha instruction in version 1.7.3I have found it in Options!
Sorry for the trouble.
Fully resolved.Forum: Fixing WordPress
In reply to: secure admin access on shared hosting$25 is not for the certificate but rather for the job of installing it as they would not let me do it myself.
Sorry for not being clear.
I know I can find cheap certificate on the net.
The shared hosting is cheap so the VPS is more expensive than shared hosting + dedicated IP.Forum: Fixing WordPress
In reply to: secure admin access on shared hostingJames, thanks for your reply.
I shall try this.
I agree that the certificate price is not an issue. However, the hosting provider I am going to sign up with, charges $24/yr for the dedicated IP + $25 for installing any certificate.I have found the Settings page of Sucuri.
However, I have not found the option to send all its security logs through a secure connection with SSL that you indicated.
Please indicate in which tab it is found.
Many thanks.I have the same questions as Pepz345.
I do not have access to Sucuri plugin settings from the list of my plugins; I can only Deactivate or Edit, no Settings button as for other plugins.
I do not have Sucuri API key since I am still working on my localhost site before getting to production, and I have already upgraded to WP 4.1 which you have not yet tested with Sucuri; maybe one of these is the reason for me not being able to access the Settings?
Not being able to access the settings, I have reviewed your video instructions to install, and did not see there any SSL option you indicated.
The bottom line of my questions is as follows.
I can insert the line
define(‘FORCE_SSL_LOGIN’, true);
or
define(‘FORCE_SSL_ADMIN’, true);
in my wp-config.php; however, I do not want to mess up and for this reason I would like to understand your logic behind not making this part of Security Hardening you do.
I would very much appreciate your clarifications.Forum: Plugins
In reply to: [Revisr] Commit DB changes onlyResolved fully indeed, many thanks!