blocks|key|1132908|text|感谢大家提供的信息|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1132909|这是一个用于子域WordPress的共享SSL插件:WordPress+HTTPS+(SSL)+http://wordpress.org/extend/plugins/wordpress-https/|offset|length|1132910|entityMap|0|LINK|mutability|MUTABLE|url|http://wordpress.org/extend/plugins/wordpress-https/^0|0|1C|1G|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|O|8|@]|9|@$D|P|E|Q|1|R]]|A|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|A|$]]]|G|$H|$5|I|J|K|A|$L|M]]]]

Thanks for the information everyone

Here is a plugin for shared SSL for sub-domain WordPress:
WordPress HTTPS (SSL)
<a href="http://wordpress.org/extend/plugins/wordpress-https/" rel="nofollow">http://wordpress.org/extend/plugins/wordpress-https/</a>

blocks|key|2744709|text|对于force+administration+and+logins+over+SSL，正确的方法是在wp-config.php中设置FORCE_SSL_ADMIN常量。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|2744710|define(+'FORCE_SSL_ADMIN',+true+);|code-block|syntax|javascript|2744711|entityMap|0|LINK|mutability|MUTABLE|url|http://codex.wordpress.org/Administration_Over_SSL^0|1E|D|1U|F|2|14|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@$9|T|A|U|B|C]|$9|V|A|W|B|C]]|D|@$9|X|A|Y|1|Z]]|E|$]]|$1|F|3|G|5|H|7|10|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|11|8|@]|D|@]|E|$]]]|L|$M|$5|N|O|P|E|$Q|R]]]]

To <a href="http://codex.wordpress.org/Administration_Over_SSL" rel="noreferrer">force administration and logins over SSL</a>, the proper way is to set the <code>FORCE_SSL_ADMIN</code> constant in <code>wp-config.php</code>.

<pre><code>define( 'FORCE_SSL_ADMIN', true );
</code></pre>

blocks|key|6097308|text|如果WordPress托管在提供SSL的反向代理后面，也会发生这种情况。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|6097309|将以下内容粘贴到主题的functions.php中：|6097310|define('FORCE_SSL_ADMIN',+true);
//+a+comma-separated+list+e.g.+http,https
if+(strpos($_SERVER['HTTP_X_FORWARDED_PROTO'],+'https')+!==+false)
+++++++$_SERVER['HTTPS']='on';|code-block|syntax|javascript|6097311|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|L|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|M|8|@]|9|@]|A|$G|H]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

This can also happen if WordPress is hosted behind a reverse proxy that provides SSL.

Paste the following in your theme's functions.php:

<pre><code>define('FORCE_SSL_ADMIN', true);
// a comma-separated list e.g. http,https
if (strpos($_SERVER['HTTP_X_FORWARDED_PROTO'], 'https') !== false)
 $_SERVER['HTTPS']='on';
</code></pre>

blocks|key|1136556|text|我以前用过这个|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1136557|if($_SERVER["HTTPS"]+!=+"on")
{
++++header("Location:+https://"+.+$_SERVER["HTTP_HOST"]+.+$_SERVER["REQUEST_URI"]);
++++exit();
}|code-block|syntax|javascript|1136558|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

I've used this before

<pre><code>if($_SERVER["HTTPS"] != "on")
{
 header("Location: https://" . $_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"]);
 exit();
}
</code></pre>

blocks|key|2744700|text|添加到插件中或页面中包含的其他地方，如果协议是https，如果用户尚未登录，如果页面不是登录页面，则会重定向到登录屏幕：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2744701|add_filter(+'parse_query',+'query_parser'+);

function+query_parser()+{
++if(!is_user_logged_in()+&&+$pagenow+!=+'wp-login.php'+&&+$_SERVER['HTTPS']+==+"on")+{
++++++wp_redirect(+home_url()+.+'/wp-login.php',+302+);
++++++exit;
++}
}|code-block|syntax|javascript|2744702|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Added in a plugin or somewhere else where it's included in the pages, this will redirect to the login screen if the protocol is https, and if the user is not already logged in, and if the page is'nt already the login page :

<pre><code>add_filter( 'parse_query', 'query_parser' );

function query_parser() {
 if(!is_user_logged_in() &amp;&amp; $pagenow != 'wp-login.php' &amp;&amp; $_SERVER['HTTPS'] == "on") {
 wp_redirect( home_url() . '/wp-login.php', 302 );
 exit;
 }
}
</code></pre>

blocks|key|6097340|text|我也有同样的问题|type|unstyled|depth|inlineStyleRanges|entityRanges|data|6097341|问题出在我的前端登录函数中|6097342|wp_signon(+$login_data,+false);|code-block|syntax|javascript|6097343|默认情况下，$secure_cookie为none。|6097344|我将其设置为true，它工作得很好。|6097345|wp_signon(+$login_data,+true);|6097346|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|R|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|S|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|T|8|@]|9|@]|A|$]]|$1|K|3|L|5|6|7|U|8|@]|9|@]|A|$]]|$1|M|3|N|5|F|7|V|8|@]|9|@]|A|$G|H]]|$1|O|3|-4|5|6|7|W|8|@]|9|@]|A|$]]]|P|$]]

I was having same problem

the issue was in my front end login function

<pre><code>wp_signon( $login_data, false);
</code></pre>

$secure_cookie by default is none.

I set that to true and it worked great.

<pre><code>wp_signon( $login_data, true);
</code></pre>

blocks|key|1136633|text|if+(+force_ssl_admin()+&&+!+is_ssl()+)+{
++++if+(+0+===+strpos(+$_SERVER['REQUEST_URI'],+'http'+)+)+{
++++++++wp_safe_redirect(+set_url_scheme(+$_SERVER['REQUEST_URI'],+'https'+)+);
++++++++exit();
++++}+else+{
++++++++wp_safe_redirect(+'https://'+.+$_SERVER['HTTP_HOST']+.+$_SERVER['REQUEST_URI']+);
++++++++exit();
++++}
}|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|1136634|unstyled|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|G|8|@]|9|@]|A|$B|C]]|$1|D|3|-4|5|E|7|H|8|@]|9|@]|A|$]]]|F|$]]

<pre><code>if ( force_ssl_admin() &amp;&amp; ! is_ssl() ) {
 if ( 0 === strpos( $_SERVER['REQUEST_URI'], 'http' ) ) {
 wp_safe_redirect( set_url_scheme( $_SERVER['REQUEST_URI'], 'https' ) );
 exit();
 } else {
 wp_safe_redirect( 'https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'] );
 exit();
 }
}
</code></pre>

I have WordPress in a sub-domain like blog.my-site.com and can't use SSL with sub-domains (https:// blog.my-site.com)

Is there a way to force WordPress admin/login pages ONLY to SSL URL https:// www.my-site.com/blog_dir/wp-admin/ (the folder name is not the same as sub-domain)

How to force Wordpress admin/login pages with SSL?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我在像blog.my-site.com这样的子域中有WordPress，不能将SSL用于子域(https:// blog.my-site.com)有没有办法强制WordPress管理/登录页面只访问SSL :// www.my-site.com/blog_dir/wp-admin/ (文件夹名称与子域不同)

问如何使用SSL强制Wordpress管理/登录页面？
EN

回答 7

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何使用SSL强制Wordpress管理/登录页面？EN

回答 7

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何使用SSL强制Wordpress管理/登录页面？
EN