[wp-trac] [WordPress Trac] #34783: SSL detection not reliable, as such mixed content and thus trouble

WordPress Trac noreply at wordpress.org
Wed Nov 25 01:06:10 UTC 2015


#34783: SSL detection not reliable, as such mixed content and thus trouble
--------------------------+------------------------
 Reporter:  xSWATx        |       Owner:
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:
Component:  General       |     Version:  4.3.1
 Severity:  normal        |  Resolution:  duplicate
 Keywords:                |     Focuses:
--------------------------+------------------------
Changes (by johnbillion):

 * status:  new => closed
 * resolution:   => duplicate
 * milestone:  Awaiting Review =>


Comment:

 Duplicate of #31288.

 Thanks for the report, @xSWATx, and welcome to WordPress Trac.

 This is something that comes up often, but is not something that will be
 fixed due to the nature of handling client-provided headers, which is
 what's needed to address the issue.
 [https://core.trac.wordpress.org/ticket/31288#comment:17 See here for more
 info.]

 The long and short of it is that this is a server-level configuration
 issue with reverse proxy web servers. It's not a WordPress issue, and it's
 not limited to WordPress. There's no need to modify the `is_ssl()`
 function. You just need to add something along the lines of the following
 to your wp-config.php file:

 `$_SERVER['HTTPS'] = 1;`

 If you're using Cloudflare Flexible SSL (or even if you're not), you may
 also want to take a look at the [https://wordpress.org/plugins/cloudflare-
 flexible-ssl/ Cloudflare Flexible SSL plugin].

--
Ticket URL: <https://core.trac.wordpress.org/ticket/34783#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list