Ads 468x60px

freak2code is the blog about latest geek news,software reviews ,trends in technology and more informative stuff......

Thursday, 23 August 2012

Secure all WordPress logins with HTTPS even if you don’t have your own SSL certificate


Secure all WordPress logins with HTTPS even if you don’t have your own SSL certificate

If you’re unable to install an SSL certificate on your web server or are just too cheap to buy your own ($10+ per year per website), you can still force all WordPress logins to use the secure HTTPS protocol.
Note: If you already have your own SSL certificate installed, all you need to do is use the FORCE_SSL_LOGIN wp-config.php constant. You don’t need this plugin.

How to setup the Https-SSL-free plugin

  1. Install and activate the Https-SSL-free plugin.
  2. Upon plugin activation, it will change your WordPress Site URL setting from http://example.com to https://example_com.1.com.ar and log you out.
  3. Your http://example.com/wp-admin link will now redirect to https://example_com.1.com.ar/wp-admin, but your front-end Site Address URL will remain unchanged as http://example.com.
  4. Type in your website links and you’ll be directed to the HTTPS version when needed.
  5. Upon plugin deactivation, the WordPress Site URL is restored to http://example.com.
The Https-SSL-free plugin's WordPress.org header image

How the Https-SSL-free plugin works

The 1.com.ar domain belongs to an Argentinean web hosting company. The domain has a wildcard SSL certificate (typically a few hundred dollars per year), which is how your redirected URLs are able to use its SSL certificate at no additional cost.

0 comments:

Post a Comment

Recent Posts