Share

Question

Hi,
i have recently install wordpress with LEMP on ubuntu 14.04. then i activated cloudflare cdn with flexible ssl.

my ssl is active and i can open my site with https but the problem is the whole sites design is changed and i get this mssgage


Your connection to the site is encrypted, but Google Chrome has detected mixed content on the page. Be careful if you're entering information on this page. Mixed content can provide a loophole for someone to manipulate the page. This content could be third- party images or ads embedded on the page.

i know i have to change my whole site from http to https to solve that issue but how? im kinda newbie to these field so please give me some detail instruction or a tutorial to move my site from http to https will be great.

also please clear me, do i have to do it everytime when i upload an image, plugin, theme or something? or just one time modification will be enough?

Accepted Answer

gparent November 27, 2014

Hi,

You need to pass the X-Forwarded-Proto header down to wordpress so it knows that the original request was over HTTPS. You do not need to enable SSL on your site, though that would be more secure.

Reply

newbie November 27, 2014

hi,
thanks for your fast reply.
could u give me some details information how can i do that?
gparent November 27, 2014

You can see an example of the passing http headers down here:

https://www.digitalocean.com/community/tutorials/how-to-set-up-nginx-load-balancing-with-ssl-termination

The tutorial isn't for your purpose, but you can look at how the different HTTP headers are passed down to PHP code the same way it's passed to another web server.

How To Set Up Nginx Load Balancing with SSL Termination
by Jesin A
Use SSL termination to reduce your SSL certificate and software management overhead on load-balanced servers. This tutorial uses an Nginx load-balancer and LAMP backends.

Answer 2

newbie November 27, 2014

hi,
thanks for your fast reply.
could u give me some details information how can i do that?
gparent November 27, 2014

You can see an example of the passing http headers down here:

https://www.digitalocean.com/community/tutorials/how-to-set-up-nginx-load-balancing-with-ssl-termination

The tutorial isn't for your purpose, but you can look at how the different HTTP headers are passed down to PHP code the same way it's passed to another web server.

How To Set Up Nginx Load Balancing with SSL Termination
by Jesin A
Use SSL termination to reduce your SSL certificate and software management overhead on load-balanced servers. This tutorial uses an Nginx load-balancer and LAMP backends.

Accepted Answer

newbie November 27, 2014

[deleted]

Reply

Accepted Answer

androidapprevie March 17, 2015

Hi there we have written a simple basic guide covering all we did in the switching to secure protocol how we moved our WordPress blog from HTTP to HTTPS / SSL

Reply

how to transfer wordpress site from http to https

Leave a Comment

Share

Share your Question

how to transfer wordpress site from http to https

Leave a Comment

Almost there!

Report a Bug