Fred Chapman

P.S. Meanwhile, I’ve commented out the new code dealing with quotas so that I can continue to use the plugin.

P.P.S. You can try a PositiveSSL certificate for FREE for 30 days here:

https://www.positivessl.com/ssl-certificate-products/free-ssl-certificate.html

P.S. You can purchase a PositiveSSL certificate from Comodo here:

https://www.positivessl.com/ssl-certificate-products/ssl/ssl-certificate-positivessl.html

Hi Mike,

Thanks for your speedy reply! I put these two lines in my wp-config.php file:

define(‘FORCE_SSL_LOGIN’, true);
define(‘FORCE_SSL_ADMIN’, true);

When I go to login, it still uses plain old HTTP. When I access my admin panel, it again uses plain old HTTP. It never tries to redirect to anything. In fact, none of the SSL/HTTPS plugins I’ve tried seem to work with shared SSL.

I checked the Shared SSL box in your plugin and entered the secure URL. For InMotion Hosting, it has the form:

https://secureNN.inmotionhosting.com/~USERNAME

where NN is the server number and USERNAME identifies the account.

Since I posted my question, I’ve done a lot of shopping around for SSL certificates. Comodo sells SSL certificates with 1024-bit public keys and 256-bit session keys for only $10/year. A cryptography expert I know confirms that 1024-bit RSA can still be considered secure for a few more years, despite the recent hype to the contrary. (Tampering with the power supply to induce and exploit hardware faults can hardly be considered a realistic scenario in any good commercial data center.)

At $10/year, anyone can afford to get a dedicated SSL certificate. A secure URL based on the domain name looks more professional, and that inspires confidence in customers. I think it’s well worth the money!

Fred

P.S. I tested the plugin using three different browsers: Chrome, Firefox, and Internet Explorer. None of them used HTTPS for login/admin pages.

Hi Mike,

I am trying to use your plugin with a shared SSL certificate on a WordPress website hosted by InMotion Hosting. Unfortunately, neither the login page nor the administrative pages are using HTTPS. Will the new version of your plugin provide this functionality?

By the way, I found a small mistake in the installation instructions. Step 1 says to “Upload wordpress-https.php to the /wp-content/plugins/ directory.” It should say to upload the “wordpress-https directory” (not just the PHP file) to the plugins directory.

Thanks for all your hard work on this plugin! I hope it can do what I need so that my clients and I won’t have to pay more $$$ for dedicated SSL certificates.

All the best,

Fred Chapman