Got it working to my expectations with just a couple lines of code.
In wp-config.php
if(WP_SITEURL != "http://mwthink766tanbo6.onion"){ // Disable SSL on our hidden service
define('FORCE_SSL_ADMIN', true);
define('FORCE_SSL_LOGIN', true);
}
In /wp-content/plugins/better-wp-security/core/modules/ssl/class-itsec-ssl.php we add
|| (WP_SITEURL == "http://mwthink766tanbo6.onion")
to the end of if statement here
if ( isset( $hide_options['enabled'] ) && ( $hide_options['enabled'] === true ) && ( $_SERVER['REQUEST_URI'] == ITSEC_Lib::get_home_root() . $hide_options['slug'] ) ) {
Works great. Does anyone know if this project is open source (Doesn’t seem like it is)? If it is, I plan to integrate this into the plugin menu and make it a toggleable option.
Let me know devs.
