Much thanks! I always wanted SSL admin in Wordpress!

I’ve been using your blog to learn about WordPress and Linux in general, cheers for dropping by!

The plugin translates addresses by simply changing ‘http’(://unchanged.com) to ‘https’(://unchanged.com)

Thanks for bringing that up Jerry

Your plugin resolved my situation. Just wanted to say thank you very much!

It’s also reassuring for me to know that others have experienced the same issues.

Makes it all the more worthwhile to make a solution available.

If anyone experiences any issues please post a comment.

Also, this plugin does not work when installed into the plugins directory of wordpress that’s available in the Debian repositories (2.0.6). After activating the plugin, every page it returns is an empty page, and the only way to get back in is to delete the plugin.

>>> Does this plugin do anything besides rewrite URL’s?

Rewriting URLs is a minor feature of the plugin. There’s much more happening on the backend.

I don’t know if you have a facility to stack trace the server calls. If you have, simply call the login page in https (without the plugin) and login. Watch what happens on the backend, there are http calls all over the place. The plugin takes care of this.

The plugin ensures that other elements of the page are also re-written to https, therefore avoiding the mixed content warnings that one gets from the browser when https pages containing http elements are loaded.

The login page is in the same directory as the blog. Therefore you cannot simply apply https to the admin folder as the transfer of login details would be happening on the http side. The plugin takes care of this.

The plugin also ensures cookies are forced over SSL. Cookie contents are scrambled and so anyone trying to view cookies with the intention of stealing user details see gibberish.

>>> This plugin does not work when used with a Debian repository install of Wordpress 2.0.6

Thanks for the info, unfortunately I don’t have Debian Linux setup to run a test. You might want to try out a manual installation of the current stable release, 2.0.7. which should work fine.

Hope that helps.

I was looking for this plugin for a long time already. Until now I was playing with some custom rewrite rules, which didn’t work that great.

However, I have a problem if used together with the gallery plugin (see http://wpg2.galleryembedded.com/index.php/Main_Page). However, if I add the tag to include a picture in one of my posts, the preview on the edit page remains blank. If I remove the tag again, the preview works perfect.

Anybody seen this before?

al:x

I haven’t run any extensive tests so if anyone experiences any issues please post a comment.

PS. @ Al:x; just sent you an email.

[www.domain.com] has sent an incorrect or unexpected message. Error Code -12263.

WordPress 2.0.7 should work fine.

Error 12263 points to a problem with the SSL setup on the server.

“SSL received a record that exceeded the maximum permissible length.”

This generally indicates that the remote peer system has a flawed implementation of SSL, and is violating the SSL specification.

If you are running your own web server the following will help:

http://www.helicontech.com/forum/forum_posts-TID-6150.htm
http://www.howtoforge.com/forums/showthread.php?t=9665
http://virtuemart.net/index.php?option=com_smf&Itemid=71&topic=24508.0

If you are on a hosted server this is an issue your host should resolve for you.

To de-activate the plugin whilst you resolve the issue simply delete it from the /plugins/ directory.

Nice plugin. Thanks a lot.

Does this work with WordpressMu?

Best

I have never worked with MU so can’t say.

Someone else may have though?

Will this plugin work with a shared SSL certificate?

Thanks.

Before activating the plugin, you can test if you have the correct setup by typing in your blog address with https instead of http.

If the browser displays your site, you can use the plugin, if it doesn’t, you don’t have the correct setup.

Looking at Lunarpages, I don’t see that any of the plans include a private SSL certificate as standard. The business plan includes ‘Free SSL Installation’ but this doesn’t mean that they include the certificate.

this should help:
http://desk.lunarpages.com/faq.php?do=article&articleid=51

Also bare in mind that you need a private(or personal) SSL certificate NOT ’shared’.

I use Lunarpages, and we have an SSL certificate purchased from Thawte. It works just fine with this plugin. You need a privately purchased SSL certificate.

thanks for the great plugin:)

For those that are interested; the problem was due to a change in PHP 5.2 that causes a fatal error in cache.php (any wordpress plugins that pass content through a filter will also suffer the same fate).

I’ve implemented a fix that forces the cache flushing before the termination of the object.

The current version is now 0.2 (59)

Enjoy!

The setup is identical as it was before but with the addition of an extra step for Shared SSL setups.

The code is written to allow for any type of Shared SSL url.
The following are examples:

“https://shared_ssl.com/username/”
“https://username.shared_ssl.com/”

To define the url provided by your host simply populate the variable $secure_url in secure-admin.php with the address.

Please ensure that the address includes the root wordpress folder. eg:

$secure_url=”https://shared_ssl.com/username/wordpress/”

@alon, Enjoy!

First of all it’s important to determine whether you are setup for using the plugin.

With the plugin de-activated, you should be able to access your blog using a https:// prefix. clicking on any links will return you back to http:// but at least you can determine whether the https:// counterpart is setup.

I suspect that you will get the same message without the plugin. This may be due to your permission settings with your host.

If you still can’t resolve it, contact me via the contact form and I’ll try to help you further. If you include any IM details we can have a live chat.

Haris

I’m not overly concerned about the security of this blog. There is no mission critical data here, but I am interested in encryption and using SSL. It makes sense to me, to force all use of the wordpress administration interface over SSL. I tho…

I found a great……

I found a great……

Haris.tv » WordPress SSL Plugin Secure-Admin patched and working!…