New to the community? Start here

SSL link for Pro Upgrade admin bar button

Im getting insecure content issues from the Pro Upgrade button on the admin bar for logged in admins.

The link seems to be hard coded to http: even when browsing in https:

Please apply a patch for this asap as it stops my app being used in Facebook application iframes.

Ben

Thu, 20 Feb 2014 8:39:32

aristath
- Recruit
- 1,975 pts: Hero points 18,360 pts: Rep. points LEVEL 29
Hello there @jamin, I hope you’re well today!

Could you please post a link to your pro-sites page so that I may try to figure out what is going on and try to replicate this?

Please advise,

Ari.
Jamin
- Site Builder, Child of Zeus
- 109 pts: Hero points 144 pts: Rep. points LEVEL 4
```
<li id="wp-admin-bar-pro-site">

<a class="ab-item" href="http://like2unlock.customtabs.co.nz/pro-site/?bid=844">

<span>Pro Upgrade</span>

</a>

</li>
```
There is the snippet of the source code for the page which was browsing on HTTPS:

And ofcourse the link included.

Is this what you required?
Jamin
- Site Builder, Child of Zeus
- 109 pts: Hero points 144 pts: Rep. points LEVEL 4
In pro-sites.php lines 540 under checkout_url function.
```
if ( apply_filters('psts_force_ssl', false) ) {

$url = str_replace('http://', 'https://', $url);

}
```
Shouldn’t this code detect if the user is currently browsing in SSL and change the link accordingly? seems silly to have to change it to force ssl in the settings.

If the page is loaded in SSL then the link added to the admin bar should be SSL.
aristath
- Recruit
- 1,975 pts: Hero points 18,360 pts: Rep. points LEVEL 29
@jamin

Shouldn’t this code detect if the user is currently browsing in SSL and change the link accordingly? seems silly to have to change it to force ssl in the settings.

This function changes does NOT have the URL hard-coded.

If uses the ‘psts_force_ssl’ filter to determine if it should be http or https.

This filter is for example forced when using stripe and paypal in some cases.

To force SSL on that page on your site you can add this on your theme’s functions.php file:
```
// This is a simple dummy function that returns true.

function custom_dummy_return_true() {

return true;

}

add_filter( 'psts_force_ssl', 'custom_dummy_return_true' );
```
I hope that helps!

Cheers,

Ari.
Jamin
- Site Builder, Child of Zeus
- 109 pts: Hero points 144 pts: Rep. points LEVEL 4
Great thank you!
aristath
- Recruit
- 1,975 pts: Hero points 18,360 pts: Rep. points LEVEL 29
I’m glad I could help!

Take care,

Ari.

SSL link for Pro Upgrade admin bar button

Learn more

In The WordPress

Resources

Blog

Learn more

How do you rate me?

Thank you for rating your experience!