Trouble with HTTPS when uploading media in 3.5

  • TJF27

    (@tedfolkman)


    13 years, 5 months ago

    Hello!

    I am having a new problem with WordPress 3.5 that I did not have with 3.4.2. I do all my site administration over SSL (my wp-config file has the following line: define('FORCE_SSL_ADMIN', true);). When I go to the dashboard I see the green padlock in the address bar, so I know my SSL certificate is working properly. With WP 3.5., when I go to my media library, instead of the green padlock I get a message saying that while my connection is encrypted, the page “includes other resources that are not secure” and that can be viewed by others while in transit or modified by an attacker. Yikes! If I click once on the button to take me back to the dashboard, I can navigate back to the dashboard, but the warning remains. But if I click on the dashboard button again, the green padlock returns.

    In case it is useful, I use the following theme: WooThemes Canvas v. 5.0.13, and the following plugins:

    Acronyms 2
    Antispam Bee
    BackWPup
    Broken Link Checker
    BulletProof Security
    Liveblog
    Login Lockdown
    NextScripts: Social Networks Auto-Poster
    Prevent Password Resetn
    Quick Page/Post Redirect Plugin
    Simple Footnotes
    WordPress SEO
    Wysija Newsletters

    Thank you!

Viewing 9 replies - 1 through 9 (of 9 total)
  • tomontoast

    (@tomontoast)

    13 years, 5 months ago

    Try to find out which resources are non secure by searching for http:// in your page source. That should weed out the culprit. Also try disabling plugins.

    Thread Starter TJF27

    (@tedfolkman)

    13 years, 5 months ago

    Thanks for the tip. It looks like the media files themselves are the culprit. Here is an example:

    <td class="column-icon media-icon">				<a href="https://lettersblogatory.com/wp-admin/post.php?post=11674&action=edit" title="Edit “Marcus Junius Brutus”">
					<img width="39" height="60" src="http://lettersblogatory.com/wp-content/uploads/2012/12/Brutus-99x150.jpg" class="attachment-80x60" alt="Marcus Junius Brutus" />				</a>

    I have the same problem with all plugins deactivated.

    Any thoughts as to why this is happening or how it can be fixed?

    tomontoast

    (@tomontoast)

    13 years, 5 months ago

    Well I’d say its not a problem because you know that those files can’t be malicious and you won’t be worried if they leak, technically its a bug so you should report it as a new ticket on trac http://core.trac.ww.wp.xz.cn/newticket

    Thread Starter TJF27

    (@tedfolkman)

    13 years, 5 months ago

    Thank you! I have reported it. I appreciate your help.

    tomontoast

    (@tomontoast)

    13 years, 5 months ago

    For reference ticket is http://core.trac.ww.wp.xz.cn/ticket/22982

    tomontoast

    (@tomontoast)

    13 years, 5 months ago

    Put this in functions.php as a quick fix:

    function fix_ssl_attachment_url( $url ) {

	if ( is_ssl() )
		$url = str_replace( 'http://', 'https://', $url );
	return $url;

}
add_filter( 'wp_get_attachment_url', 'fix_ssl_attachment_url' );
    beginr

    (@beginr)

    12 years, 11 months ago

    @tomontoast Thank you so much! that code worked for me. 🙂

    beginr

    (@beginr)

    12 years, 11 months ago

    hey @tomontoast how would i do the same for any plugins?

    Thanx!

    beginr

    (@beginr)

    12 years, 11 months ago

    actually, I defined the site address in the wp-config file as stated in wordpress codex. Thanx anyway 🙂

Viewing 9 replies - 1 through 9 (of 9 total)

The topic ‘Trouble with HTTPS when uploading media in 3.5’ is closed to new replies.