HTTP / HTTPS Remover: SSL Mixed Content Fix - Version 1.5.2

Version Description

Release Date - 26 April 2017

  • Improvements
Download this release

Release Info

Developer condacore
Plugin Icon 128x128 HTTP / HTTPS Remover: SSL Mixed Content Fix
Version 1.5.2
Comparing to
See all releases

Code changes from version 1.5.1 to 1.5.2

Files changed (2) hide show
  1. http-https-remover.php +2 -1
  2. readme.txt +161 -58
http-https-remover.php CHANGED
@@ -3,7 +3,7 @@
3
  * Plugin Name: HTTP / HTTPS Remover
4
  * Plugin URI: https://de.wordpress.org/plugins/http-https-remover/
5
  * Description: This Plugin cleans all the URLs in the source code while it removes the http:// and https:// and replaces it with //
6
- * Version: 1.5.1
7
  * Author: CONDACORE
8
  * Author URI: https://condacore.com/
9
  * License: GPLv3
@@ -71,6 +71,7 @@ class HTTP_HTTPS_REMOVER
71
 
72
  $buffer = str_replace(array('http://'.$_SERVER['HTTP_HOST'],'https://'.$_SERVER['HTTP_HOST']), '//'.$_SERVER['HTTP_HOST'], $buffer);
73
  $buffer = str_replace('content="//'.$_SERVER['HTTP_HOST'], 'content="https://'.$_SERVER['HTTP_HOST'], $buffer);
 
74
  $buffer = str_replace('"url" : "//', '"url" : "https://', $buffer);
75
  $buffer = preg_replace(array('|https://(.*?).googleapis.com|','|https://(.*?).googleapis.com|'), '//$1.googleapis.com', $buffer);
76
  $buffer = preg_replace(array('|https://(.*?).google.com|','|https://(.*?).google.com|'), '//$1.google.com', $buffer);
3
  * Plugin Name: HTTP / HTTPS Remover
4
  * Plugin URI: https://de.wordpress.org/plugins/http-https-remover/
5
  * Description: This Plugin cleans all the URLs in the source code while it removes the http:// and https:// and replaces it with //
6
+ * Version: 1.5.2
7
  * Author: CONDACORE
8
  * Author URI: https://condacore.com/
9
  * License: GPLv3
71
 
72
  $buffer = str_replace(array('http://'.$_SERVER['HTTP_HOST'],'https://'.$_SERVER['HTTP_HOST']), '//'.$_SERVER['HTTP_HOST'], $buffer);
73
  $buffer = str_replace('content="//'.$_SERVER['HTTP_HOST'], 'content="https://'.$_SERVER['HTTP_HOST'], $buffer);
74
+ $buffer = str_replace('>//'.$_SERVER['HTTP_HOST'], '>https://'.$_SERVER['HTTP_HOST'], $buffer);
75
  $buffer = str_replace('"url" : "//', '"url" : "https://', $buffer);
76
  $buffer = preg_replace(array('|https://(.*?).googleapis.com|','|https://(.*?).googleapis.com|'), '//$1.googleapis.com', $buffer);
77
  $buffer = preg_replace(array('|https://(.*?).google.com|','|https://(.*?).google.com|'), '//$1.google.com', $buffer);
readme.txt CHANGED
@@ -1,31 +1,39 @@
1
- === HTTP / HTTPS Remover ===
2
  Contributors: condacore
3
- Donate link: https://www.paypal.me/MariusBolik
4
- Tags: http, https, mixed content
5
- Requires at least: 1.2.0
6
- Tested up to: 4.7.4
7
- Stable tag: 1.5.1
8
- License: GPLv3
9
- License URI: http://www.gnu.org/licenses/gpl-3.0.html
10
-
11
- A fix for mixed content! This Plugin removes HTTP and HTTPS protocols from all links. Works in Front- and Backend!
12
-
13
  == Description ==
14
 
15
- = Main Features =
16
- - Works in Front- and Backend<br>
17
- - Makes every Plugin compatible with https<br>
18
- - No Setup needed<br>
19
- - Compatible with Visual Composer<br>
20
- - Fixes Google Fonts issues<br>
21
- - Speeds up your website
22
 
23
- = Only install this Plugin if your web server supports https =
24
-
25
- **Mixed content** occurs when initial HTML is loaded over a secure HTTPS connection, but other resources (such as images, videos, stylesheets, scripts) are loaded over an insecure HTTP connection. This is called mixed content because both HTTP and HTTPS content are being loaded to display the same page, and the initial request was secure over HTTPS. Modern browsers display warnings about this type of content to indicate to the user that this page contains insecure resources.
 
 
 
 
 
26
 
27
- Your users are counting on you to protect them when they visit your website. It is important to fix your mixed content issues to protect all your visitors, including those on older browsers. And that's what this plugin does!
 
 
 
 
28
 
 
 
 
 
 
29
 
30
  = Example =
31
 
@@ -39,60 +47,155 @@ With Plugin:
39
  src="//domain.com/script02.js"
40
  src="//domain.com/script03.js"`
41
 
42
- For more infos take a look at the screenshot.
43
-
44
- = Note =
45
 
46
- **The Plugin does not remove http and https from external links.**
 
 
 
47
 
 
 
48
 
49
- = If using CloudFlare or other Caching Plugin =
50
 
51
- **CloudFlare:** <br>
52
- 1. Go to Settings -> CloudFlare -> More Settings<br>
53
- 2. Disable "Automatic HTTPS Rewrites" (Our Plugin is better) :)<br>
54
- 3. Go back to "Home" in CloudFlare Plugin and click "Purge Cache" for the changes to take effect!
55
 
56
- **Other Cache Plugin:** <br>
57
- Please purge/clear cache for the changes to take effect!
58
-
59
-
60
- = More =
61
- [Feel free to visit our Website](https://condacore.com/)
62
-
63
-
64
- == Installation ==
65
- 1. Upload `http-https-remover` folder to your `/wp-content/plugins/` directory.
66
- 2. Activate the plugin from Admin > Plugins menu.
67
  3. Once activated your site is ready!
68
 
69
- == Screenshots ==
70
-
71
- 1. The Sourcecode of the Website will look like this!
72
-
 
 
 
 
 
 
 
 
 
 
 
 
 
73
  == Changelog ==
74
- = 1.5 (04/25/17) =
75
- * Fixed a reCAPTCHA issue
76
- = 1.5 (04/25/17) =
 
 
 
 
 
 
 
 
 
 
 
77
  * Now it removes http and https from source code again
78
  * Fixed broken links in social sharing plugins
79
- = 1.4 (03/02/17) =
 
 
 
80
  * Finally fixed srcset Problems
81
  * Changed the working method of the Plugin
82
  * Some other bugfixes
83
- = 1.3.1 (01/13/17) =
 
 
 
84
  * Added support for srcset tag
85
- = 1.3 (01/07/17) =
 
 
 
86
  * Fixed the issue that Twitter card image is not displayed
87
- = 1.2 (12/11/16) =
 
 
 
88
  * Added support for Google (Fonts, Ajax, Maps etc.)
89
  * Compatibility for Wordpress 4.7
90
- = 1.1.1 (10/18/16) =
 
 
 
91
  * Added support for "content" tag
92
  * Added support for "loaderUrl" tag
93
- = 1.1 (10/17/16) =
 
 
 
94
  * Fixed the issue that videos in Revolution Slider stopped playing
95
  * The plugin now works on backend too
96
- * Other small changes
97
- = 1.0 (10/16/16) =
98
- * Initial release
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1
+ === HTTP / HTTPS Remover ===
2
  Contributors: condacore
3
+ Donate link: https://www.paypal.me/MariusBolik
4
+ Tags: http, https, mixed content
5
+ Requires at least: 3.0.1
6
+ Tested up to: 4.7.4
7
+ Stable tag: 1.5.2
8
+ License: GPLv3
9
+ License URI: http://www.gnu.org/licenses/gpl-3.0.html
10
+
11
+ A fix for mixed content! This Plugin removes HTTP and HTTPS protocols from all links. Works in Front- and Backend!
12
+
13
  == Description ==
14
 
15
+ Main features:
 
 
 
 
 
 
16
 
17
+ * Works in Front- and Backend
18
+ * Makes every Plugin compatible with https
19
+ * No Setup needed
20
+ * Compatible with Visual Composer
21
+ * Fixes Google Fonts issues
22
+ * Makes your website faster
23
+
24
+ = What does this Plugin do? =
25
 
26
+ Links with "http://" extensions need to change to contain the “s” part of HTTP protocol (https://) pointing out to an SSL-reserved port. A more elegant way of handling different protocols is to have only slashes where port is expected "//". so that page can use the protocol used to open the page itself:
27
+ 1. If page was loaded via http links with "//", it will be transformed to http://
28
+ 2. If page was loaded via https links with "//", it will be ultimately transformed to https://
29
+
30
+ Of course, this only applies to links that are loading content from your own domain, Google Fonts and other Google APIs. Your users are counting on you to protect them when they visit your website. It is important to fix your mixed content issues to protect all your visitors, including those on older browsers. And that's what this plugin does!
31
 
32
+ = What is Mixed Content? =
33
+
34
+ **Mixed content** occurs when initial HTML is loaded over a secure HTTPS connection, but other resources (such as images, videos, stylesheets, scripts) are loaded over an insecure HTTP connection. This is called mixed content because both HTTP and HTTPS content are being loaded to display the same page, and the initial request was secure over HTTPS. Modern browsers display warnings about this type of content to indicate to the user that this page contains insecure resources.
35
+
36
+ **Note: You should always protect all of your websites with HTTPS, even if they don’t handle sensitive communications.**
37
 
38
  = Example =
39
 
47
  src="//domain.com/script02.js"
48
  src="//domain.com/script03.js"`
49
 
50
+ = If using CloudFlare or other Caching Plugin =
 
 
51
 
52
+ **If using CloudFlare Plugin:**
53
+ 1. Go to Settings -> CloudFlare -> More Settings
54
+ 2. Disable "Automatic HTTPS Rewrites" (Our Plugin is better) :)
55
+ 3. Go back to "Home" in CloudFlare Plugin and click "Purge Cache" for the changes to take effect!
56
 
57
+ **Other Cache Plugin:**
58
+ If the plugin isn't working like expected please purge/clear cache for the changes to take effect!
59
 
60
+ For more info visit us at [condacore.com](https://condacore.com/ "CONDACORE Website")
61
 
62
+ == Installation ==
 
 
 
63
 
64
+ 1. Upload `http-https-remover` folder to your `/wp-content/plugins/` directory.
65
+ 2. Activate the plugin from Admin > Plugins menu.
 
 
 
 
 
 
 
 
 
66
  3. Once activated your site is ready!
67
 
68
+ == Frequently Asked Questions ==
69
+
70
+ = How do I know if my site has mixed content? =
71
+
72
+ If a green padlock appears, then your site is secure with no mixed content.
73
+ In Chrome or Safari, there will be **no padlock** icon in the browser URL field with mixed content.
74
+ In Firefox the padlock icon will reflect a warning with mixed content.
75
+
76
+ = What if I am using a CDN? =
77
+
78
+ Change all your CDN references to load with https://
79
+ Change all your CDN references to load with // (this will adapt based on how the page is loaded)
80
+
81
+ == Screenshots ==
82
+
83
+ 1. The Sourcecode of the Website will look like this!
84
+
85
  == Changelog ==
86
+
87
+ = 1.5.2 =
88
+ *Release Date - 26 April 2017*
89
+
90
+ * Improvements
91
+
92
+ = 1.5.1 =
93
+ *Release Date - 25 April 2017*
94
+
95
+ * Fixed a reCAPTCHA issue!
96
+
97
+ = 1.5 =
98
+ *Release Date - 25 April 2017*
99
+
100
  * Now it removes http and https from source code again
101
  * Fixed broken links in social sharing plugins
102
+
103
+ = 1.4 =
104
+ *Release Date - 02 March 2017*
105
+
106
  * Finally fixed srcset Problems
107
  * Changed the working method of the Plugin
108
  * Some other bugfixes
109
+
110
+ = 1.3.1 =
111
+ *Release Date - 13 January 2017*
112
+
113
  * Added support for srcset tag
114
+
115
+ = 1.3 =
116
+ *Release Date - 07 January 2017*
117
+
118
  * Fixed the issue that Twitter card image is not displayed
119
+
120
+ = 1.2 =
121
+ *Release Date - 11 December 2016*
122
+
123
  * Added support for Google (Fonts, Ajax, Maps etc.)
124
  * Compatibility for Wordpress 4.7
125
+
126
+ = 1.1.1 =
127
+ *Release Date - 18 October 2016*
128
+
129
  * Added support for "content" tag
130
  * Added support for "loaderUrl" tag
131
+
132
+ = 1.1 =
133
+ *Release Date - 17 October 2016*
134
+
135
  * Fixed the issue that videos in Revolution Slider stopped playing
136
  * The plugin now works on backend too
137
+ * Other small changes
138
+
139
+ = 1.0 =
140
+ *Release Date - 16 October 2016*
141
+
142
+ * Initial release
143
+
144
+ == Upgrade Notice ==
145
+
146
+ = 1.5.2 =
147
+ *Release Date - 26 April 2017*
148
+
149
+ * Improvements
150
+
151
+ = 1.5.1 =
152
+ *Release Date - 25 April 2017*
153
+
154
+ * Fixed a reCAPTCHA issue!
155
+
156
+ = 1.5 =
157
+ *Release Date - 25 April 2017*
158
+
159
+ * Now it removes http and https from source code again
160
+ * Fixed broken links in social sharing plugins
161
+
162
+ = 1.4 =
163
+ *Release Date - 02 March 2017*
164
+
165
+ * Finally fixed srcset Problems
166
+ * Changed the working method of the Plugin
167
+ * Some other bugfixes
168
+
169
+ = 1.3.1 =
170
+ *Release Date - 13 January 2017*
171
+
172
+ * Added support for srcset tag
173
+
174
+ = 1.3 =
175
+ *Release Date - 07 January 2017*
176
+
177
+ * Fixed the issue that Twitter card image is not displayed
178
+
179
+ = 1.2 =
180
+ *Release Date - 11 December 2016*
181
+
182
+ * Added support for Google (Fonts, Ajax, Maps etc.)
183
+ * Compatibility for Wordpress 4.7
184
+
185
+ = 1.1.1 =
186
+ *Release Date - 18 October 2016*
187
+
188
+ * Added support for "content" tag
189
+ * Added support for "loaderUrl" tag
190
+
191
+ = 1.1 =
192
+ *Release Date - 17 October 2016*
193
+
194
+ * Fixed the issue that videos in Revolution Slider stopped playing
195
+ * The plugin now works on backend too
196
+ * Other small changes
197
+
198
+ = 1.0 =
199
+ *Release Date - 16 October 2016*
200
+
201
+ * Initial release