Force HTTPS (SSL Redirect & Fix Insecure Content)

Screenshots

Redirects all HTTP requests to the HTTPS version and fixes insecure links and resources without altering the database (also works with CloudFlare). Join our FREE Facebook group for support Worth a 5-star review? Thank you! Plugin Homepage Plugin GitHub Current Features WARNING: You must have an SSL certificate installed on your server before activating this plugin. If you website becomes inaccessible after activation, simply login via SFTP and delete this plugin from /wp-content/plugins/ and clear your browser cache, then refresh the page. the only Force SSL (HTTPS) plugin that correctly avoids protocol-relative hyperlinks and resources as recommended by the Google Chrome team and top internet security experts! 301 redirects all HTTP requests to the HTTPS version filters all internal resources to become secure (e.g. src=”https://…”) filters all internal hyperlinks to be become secure (e.g. href=”https://…”) filters all external resources to become secure (src, srcset, embeds, and objects) skips any external hyperlinks works with image srcsets too (Version 1.0.2+) no need for additional plugins to fix insecure resources avoids “protocol relative” URLs as recommended by top security experts 1, 2 zero database queries or settings pages huge SEO and security benefits Compatibility This plugin has been designed for use on SlickStack web servers with PHP 7.2 and MySQL 5.7 to achieve best performance. All of our plugins are meant for single site WordPress installations only; for both performance and usability reasons, we highly recommend avoiding WordPress Multisite for the vast majority of projects. Any of our WordPress plugins may also be loaded as “Must-Use” plugins by using our free Autoloader script in the mu-plugins directory. Defined Constants /* Plugin Meta */ define('DISABLE_NAG_NOTICES', true); Technical Details Prefix: FHTTPS Parent Plugin: N/A Disable Nag Notices: Yes Settings Page: No PHP Namespaces: No Object-Oriented Code: No Includes Media (images, icons, etc): No Includes CSS: No Database Storage: Yes Transients: No WP Options Table: Yes Other Tables: No Creates New Tables: No Creates New WP Cron Jobs: No Database Queries: Backend Only (Options API) Must-Use Support: Yes Multisite Support: No Uninstalls Data: Yes Special Thanks Alex Georgiou, Automattic, Brad Touesnard, Daniel Auener, Delicious Brains, Greg Rickaby, Matt Mullenweg, Mika Epstein, Mike Garrett, Samuel Wood, Scott Reilly, Jan Dembowski, Jeff Starr, Jeff Chandler, Jeff Matson, Jeremy Wagner, John James Jacoby, Leland Fiegel, Luke Cavanagh, Mike Jolley, Pau Iglesias, Paul Irish, Rahul Bansal, Roots, rtCamp, Ryan Hellyer, WP Chat, WP Tavern Disclaimer We released this plugin in response to our managed hosting clients asking for better access to their server, and our primary goal will remain supporting that purpose. Although we are 100% open to fielding requests from the WordPress community, we kindly ask that you keep these conditions in mind, and refrain from slandering, threatening, or harassing our team members in order to get a feature added, or to otherwise get “free” support. The only place you should be contacting us is in our free Facebook group which has been setup for this purpose, or via GitHub if you are an experienced developer. Thank you! Our Philosophy “Decisions, not options.” — WordPress.org “Everything should be made as simple as possible, but not simpler.” — Albert Einstein, et al “Write programs that do one thing and do it well… write programs to work together.” — Doug McIlroy “The innovation that this industry talks about so much is bullshit. Anybody can innovate… 99% of it is ‘Get the work done.’ The real work is in the details.” — Linus Torvalds