Security warnings

I’m getting security warnings, even thought my ISP is forcing SSL. How can I change the URLs below to HTTPS or make them dynamic so they don’t cause the SSL errors?

http://momsdemandaction.org/wp-admin/admin-ajax.php?callback=po_onsuccess&action=popover_selective_ajax&thefrom=https%3A%2F%2Fmomsdemandaction.org%2Fmth%2F&thereferrer=&active_popover=0&_=1362586474403

http://momsdemandaction.org/wp-content/plugins/popover/popoverincludes/css/fullbackground/images/opaque80.png

http://momsdemandaction.org/wp-content/plugins/popover/popoverincludes/css/fullbackground/images/opaque.png

http://momsdemandaction.org/wp-content/plugins/popover/popoverincludes/css/fullbackground/images/closemessagebland.png

  • Vaughan
    • Support/SLS MockingJay

    hi @brian_masck

    thanks for the post.

    Can I confirm that you are wanting your site to always use https for every page, & not a misxture of http & https?

    if you want to force everyone who visits your site to use https.

    you can edit wp-config & change the urls in there to https instead of http.

    then do the same in admin, you may need to redo the permalinks.

    as a last resort you could try this >

    edit your htaccess located in the public_html

    add the following just below the rewriteengine (if present) so >

    RewriteEngine On
    RewriteCond %{SERVER_PORT} 80
    RewriteRule ^(.*)$ https://www.yourdomain.com/$1 [R,L]

    though I haven’t tested this.

    it’s a bit more complex if you want just particular pages to be ssl & others not. I think there is a plugin that can force ssl, but not sure if it works with latest WP.

    hope this helps, let me know if you require further assistance.

    thanks.

  • brian_masck
    • New Recruit

    Thanks, Vaughan.

    The site is a mixture of https and http pages. My ISP controls the SSL, and can force SSL on pages on an as-needed basis.

    I’ve tracked down most https errors – even the favicon – but a few problem URLs remain.

    Looking at it from the opposite direction, perhaps turning off the popover plugin on this page would also fix.

    Thanks for your help!

  • brian_masck
    • New Recruit

    Hey Vaughan,

    I should have mentioned it, that plugin has been saved me many, many times and is just AWESOME!!!

    Unfortunately this ISP doesn’t allow its use because they admin the SSL on their servers.

    Maybe I should just ask them to take the entire site to https?

    Brian

  • Vaughan
    • Support/SLS MockingJay

    thanks @brian_masck

    yes, i think there lies the problem.

    you could possibly try in htaccess where somefolder would be the slug for the popup

    RewriteEngine On
    RewriteCond %{SERVER_PORT} 80
    RewriteCond %{REQUEST_URI} somefolder
    RewriteRule ^(.*)$ https://www.domain.com/somefolder/$1 [R,L]

    can’t say whether that would work in your case or not, but it may do.

    let me know how it goes.

    thanks

Thank NAME, for their help.

Let NAME know exactly why they deserved these points.

Gift a custom amount of points.