SSL / HTTPS Mixed content and customizer issue

  • Resolved wolf_metallo

    (@wolf_metallo)


    9 years, 8 months ago

    Hi,

    Firstly, thank you for a beautiful looking theme! I just started using it and it is fitting my requirement very well. I am having a couple of issues though:

    1. Mixed Content alert on Chrome
    I have SSL enabled on my website with own certificate and SNI on server. I only have the “Contact Us” page (link: https://infosecbyte.com/contact-us/) as HTTPS, and others are only http (plugin used: WordPress HTTPS SSL).

    The page when loaded on chrome says there is insecure content. When reviewed in Console, it’s showing line 98 to have only ‘https://’ tag for the domain name. I know this is coming for the Search function. However, I am not able to find out where that code is written or how I can change the URL to remove the http: and keep referential URLs.

    2. When I go to theme customizer, it’s not showing anything except for the left side bar which is used to customize the website. This happened after I selected FORCE_SSL_ADMIN using the plugin.

    Are the calls also going in ‘http’ when the customizer is launched? If not, then how do I resolve this issue?

    Would appreciate any help you could provide. I am not adept at writing code, but I can google pretty well.

    Thank you!

Viewing 5 replies - 1 through 5 (of 5 total)
  • Thread Starter wolf_metallo

    (@wolf_metallo)

    Part 1 of the problem is resolved – I found where the code was residing.

    Here’s the update I performed:
    1. Opened all .php files in Notepad++
    2. Did a “find in all” with keyword as “type in keyword…”
    3. Found it on row 82 of header.php
    4. Found the escapre URL code in this format:
    esc_url( home_url( ‘/’ );

    Updated it to:
    esc_url( home_url( $path = ‘/’ , $scheme = relative) )

    5. Saved and uploaded the header.php to the server – and Viola!

    Note to developer – Could you update the files in the next revision to use “relative” scheme so that https could be picked up? Or maybe isssl() function?

    Still looking for some help on the second issue though. Appreciate any input, thanks all!

    Theme Author acosmin

    (@acosmin)

    Hi! This is the first time I’ve heard about this issue. I don’t own a SSL certificate and I don’t have a way to test it for now.

    https://wp-themes.com/justwrite/ has SSL an I see it works just fine…

    It might also be a problem with the wp plugin. Did you contact the author?

    Anyway, thank you for the fix! I will try and see where the issue is and update the theme.

    Thread Starter wolf_metallo

    (@wolf_metallo)

    Thanks for the reply. I will try to research a little bit more and give some details if I find any. Everything else is working, except when I click Appearance –> Customize. I don’t see the webpage… so as you said, maybe its a problem with the plugin configuration I have done.

    And thanks for the upcoming fix, I’ll monitor the changelog so that I can remove it from my header.php file.

    Theme Author acosmin

    (@acosmin)

    I took a look and I really don’t think the problem is the theme. It uses all the requirements set by wp.org, doesn’t output any url, doesn’t include any raw url.

    What you should do:

    • Update all the links in your database to https, even for attachments, media…
    • Find a new plugin to manage SSL, the one you’re using was not updated once in the last two years. I don’t think the Customizer was actually released in that period. There might be some problems there.
    • Create a child theme and add the necessary modifications if needed.
    Thread Starter wolf_metallo

    (@wolf_metallo)

    Thanks my friend! Appreciate you looking into the code. And apologies for such a late reply!

    I never got a solution from any other source and i still can’t use the customizer. But after so many months of WP use, I’ve become comfortable with customizing without GUI.

    I will look at your suggestions and try to see what works. Once again, sorry for the late reply and thanks for your help!

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘SSL / HTTPS Mixed content and customizer issue’ is closed to new replies.