why str_replace ‘https’ to ‘http’ the redirect_url ?
-
Hi,
I came across the following line in code when we noticed out checkout stopped working and called the CCAvenue support who told us our website was sending the redirect_url as HTTP even though we had moved our website to HTTPS.
$this->notify_url = str_replace( 'https:', 'http:', home_url( '/wc-api/WC_nilesh_Ccave' ) );
Can you please let us know if there is a specific reason you are forcing HTTP on the return URL? It seems to be already causing issues for a some of your users who are on HTTPS and it instructs CCAvenue to transmit over HTTP which is insecure.
Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
- The topic ‘why str_replace ‘https’ to ‘http’ the redirect_url ?’ is closed to new replies.