[wp-trac] [WordPress Trac] #28426: An HTTPS scheme in siteurl is ignored

[WordPress Trac]

#28426: An HTTPS scheme in siteurl is ignored
----------------------------+-----------------------------
 Reporter:  johnbillion     |      Owner:
     Type:  enhancement     |     Status:  new
 Priority:  normal          |  Milestone:  Awaiting Review
Component:  Administration  |    Version:
 Severity:  normal          |   Keywords:
  Focuses:  administration  |
----------------------------+-----------------------------
 Scenario: a site where the 'WordPress Address' (`siteurl` option) uses
 HTTPS, but the 'Site Address' (`home` option) uses HTTP. `FORCE_SSL_ADMIN`
 is not defined. This situation can arise simply by changing the settings
 on the General Settings screen.

 In this situation, `admin_url()` does not return an HTTPS URL. This means
 that the login link, and links in the admin toolbar are plain HTTP when
 it's expected that they would be HTTPS links. The scheme in the 'WordPress
 Address' setting is completely ignored.

 If this option has an HTTPS scheme, `FORCE_SSL_ADMIN` should get defined
 if it is not already.

 #27954 recently implemented the front end counterpart to this.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/28426>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform