[wp-trac] [WordPress Trac] #19707: admin-ajax.php requests via http regardless of force_ssl_admin() state

[WordPress Trac]

#19707: admin-ajax.php requests via http regardless of force_ssl_admin() state
-----------------------------+-----------------------
 Reporter:  robertaccettura  |       Owner:
     Type:  enhancement      |      Status:  reopened
 Priority:  normal           |   Milestone:
Component:  Administration   |     Version:
 Severity:  normal           |  Resolution:
 Keywords:                   |     Focuses:
-----------------------------+-----------------------
Changes (by letsdogood):

 * status:  closed => reopened
 * resolution:  worksforme =>


Comment:

 Wouldn't it be more proper/correct to deduce the right scheme by default
 without needing to pass additional parameters?

 This really is an averse side effect only because of the wordpress-
 specific quirk that for whatever historical reasons Ajax is somehow a
 function of / belongs under Admin, which arguably shouldn't be the case to
 begin with.

 If at least admin_url('admin-ajax.php') could have an expected default
 behavior of *not* respecting force_ssl_admin() and would only be messing
 with the scheme in other-than-expected ways only when parameters are
 passed, it seems to me that would make much more sense and alleviate this
 particular pain for another while.

 Technicality question: Would such a change (making admin_url('admin-
 ajax.php') deduce the correct & expected scheme rather than
 force_ssl_admin()) break many websites?

--
Ticket URL: <https://core.trac.wordpress.org/ticket/19707#comment:7>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform