Really Simple SSL - Version 4.0.14

Version Description

  • Improvement: when WordPress incorrectly reports that SSL is not possible, correct the resulting site health notice.
  • Improvement: don't show the secure cookies notice on subsites of a multisite installation. Show on the network dashboard instead.
Download this release

Release Info

Developer RogierLankhorst
Plugin Icon 128x128 Really Simple SSL
Version 4.0.14
Comparing to
See all releases

Code changes from version 4.0.13 to 4.0.14

class-admin.php CHANGED
@@ -3110,6 +3110,11 @@ class rsssl_admin extends rsssl_front_end
3110
  ),
3111
  );
3112
 
 
 
 
 
 
3113
  $notices = apply_filters('rsssl_notices', $notices);
3114
  foreach ($notices as $id => $notice) {
3115
  $notices[$id] = wp_parse_args($notice, $notice_defaults);
3110
  ),
3111
  );
3112
 
3113
+ //on multisite, don't show the notice on subsites.
3114
+ if ( is_multisite() && !is_network_admin() ) {
3115
+ unset($notices['secure_cookies_set']);
3116
+ }
3117
+
3118
  $notices = apply_filters('rsssl_notices', $notices);
3119
  foreach ($notices as $id => $notice) {
3120
  $notices[$id] = wp_parse_args($notice, $notice_defaults);
class-multisite.php CHANGED
@@ -103,7 +103,6 @@ if (!class_exists('rsssl_multisite')) {
103
  $unset_array = array(
104
  'mixed_content_fixer_detected',
105
  'hsts_enabled',
106
- 'secure_cookies_set',
107
  'mixed_content_scan',
108
  'elementor',
109
  'divi',
@@ -133,7 +132,7 @@ if (!class_exists('rsssl_multisite')) {
133
  ),
134
  );
135
 
136
- //we don't need an no ssl warning on multisite
137
  unset( $notices['ssl_detected']['output']['no-ssl-detected'] );
138
 
139
  $notices['multisite_server_variable_warning'] = array(
@@ -162,6 +161,7 @@ if (!class_exists('rsssl_multisite')) {
162
  ),
163
  ),
164
  );
 
165
  return $notices;
166
  }
167
 
103
  $unset_array = array(
104
  'mixed_content_fixer_detected',
105
  'hsts_enabled',
 
106
  'mixed_content_scan',
107
  'elementor',
108
  'divi',
132
  ),
133
  );
134
 
135
+ //we don't need a no ssl warning on multisite
136
  unset( $notices['ssl_detected']['output']['no-ssl-detected'] );
137
 
138
  $notices['multisite_server_variable_warning'] = array(
161
  ),
162
  ),
163
  );
164
+
165
  return $notices;
166
  }
167
 
class-site-health.php CHANGED
@@ -23,6 +23,10 @@ if (!class_exists("rsssl_site_health")) {
23
  }
24
 
25
  public function rsssl_health_check( $tests ) {
 
 
 
 
26
  if ( !RSSSL()->really_simple_ssl->dismiss_all_notices ) {
27
 
28
  $tests['direct']['rsssl-health'] = array(
@@ -109,7 +113,7 @@ if (!class_exists("rsssl_site_health")) {
109
 
110
  if (!RSSSL()->really_simple_ssl->ssl_enabled) {
111
  if ( RSSSL()->really_simple_ssl->site_has_ssl ) {
112
- $result['status'] = 'recommended';
113
  $result['label'] = __( 'SSL is not enabled.', 'really-simple-ssl' );
114
  $result['description'] = sprintf(
115
  '<p>%s</p>',
@@ -122,7 +126,7 @@ if (!class_exists("rsssl_site_health")) {
122
  __( 'Activate SSL', 'really-simple-ssl' )
123
  );
124
  } else {
125
- $result['status'] = 'recommended';
126
  $result['label'] = __( 'No SSL detected.' , 'really-simple-ssl' );
127
  $result['description'] = sprintf(
128
  '<p>%s</p>',
23
  }
24
 
25
  public function rsssl_health_check( $tests ) {
26
+
27
+ unset($tests['async']['https_status']);
28
+
29
+
30
  if ( !RSSSL()->really_simple_ssl->dismiss_all_notices ) {
31
 
32
  $tests['direct']['rsssl-health'] = array(
113
 
114
  if (!RSSSL()->really_simple_ssl->ssl_enabled) {
115
  if ( RSSSL()->really_simple_ssl->site_has_ssl ) {
116
+ $result['status'] = 'critical';
117
  $result['label'] = __( 'SSL is not enabled.', 'really-simple-ssl' );
118
  $result['description'] = sprintf(
119
  '<p>%s</p>',
126
  __( 'Activate SSL', 'really-simple-ssl' )
127
  );
128
  } else {
129
+ $result['status'] = 'critical';
130
  $result['label'] = __( 'No SSL detected.' , 'really-simple-ssl' );
131
  $result['description'] = sprintf(
132
  '<p>%s</p>',
languages/really-simple-ssl-ru_RU.po DELETED
@@ -1,420 +0,0 @@
1
- msgid ""
2
- msgstr ""
3
- "Project-Id-Version: Really Simple SSL v2.2.2\n"
4
- "Report-Msgid-Bugs-To: \n"
5
- "POT-Creation-Date: \n"
6
- "PO-Revision-Date: 2015-11-21 19:32:58+0000\n"
7
- "Last-Translator: Rogier <rogier@rogierlankhorst.com>\n"
8
- "Language-Team: Halk <admin@aqua36.ru>\n"
9
- "MIME-Version: 1.0\n"
10
- "Content-Type: text/plain; charset=UTF-8\n"
11
- "Content-Transfer-Encoding: 8bit\n"
12
- "Plural-Forms: nplurals=3; plural=n%100/10==1 ? 2 : n%10==1 ? 0 : (n+9)%10>3 ? 2 : 1;\n"
13
- "X-Generator: Poedit 1.8.3\n"
14
- "X-Poedit-Language: \n"
15
- "X-Poedit-Country: \n"
16
- "X-Poedit-SourceCharset: utf-8\n"
17
- "X-Poedit-KeywordsList: __;_e;__ngettext:1,2;_n:1,2;__ngettext_noop:1,2;_n_noop:1,2;_c,_nc:4c,1,2;_x:1,2c;_ex:1,2c;_nx:4c,1,2;_nx_noop:4c,1,2;\n"
18
- "X-Poedit-Basepath: ..\n"
19
- "X-Poedit-Bookmarks: \n"
20
- "X-Poedit-SearchPath-0: .\n"
21
- "X-Textdomain-Support: yes"
22
-
23
- #: class-admin.php:1412
24
- #@ really-simple-ssl
25
- msgid "No SSL was detected. If you are just waiting for your ssl certificate to kick in you can dismiss this warning."
26
- msgstr "Никакой SSL не был обнаружен. Если Вы просто ожидаете своего сертификата SSL, можете отклонить это предупреждение."
27
-
28
- #: class-admin.php:1414
29
- #@ really-simple-ssl
30
- msgid "Scan SSL setup again"
31
- msgstr "Настроить сканирование SSL снова"
32
-
33
- #: class-admin.php:1492
34
- #@ really-simple-ssl
35
- msgid "We detected a definition of siteurl or homeurl in your wp-config.php, but the file is not writable. Because of this, we cannot set the siteurl to https."
36
- msgstr "Мы обнаружили, обнаружили SITEURL или homeurl в вашем WP-config.php, но файл не доступен для записи. Из-за этого, мы не можем установить HTTPS для SITEURL ."
37
-
38
- #: class-admin.php:1662
39
- #@ really-simple-ssl
40
- msgid "SSL settings"
41
- msgstr "SSL настройки"
42
-
43
- #: class-admin.php:1663
44
- #@ really-simple-ssl
45
- msgid "SSL"
46
- msgstr "SSL"
47
-
48
- #: class-admin.php:1687
49
- #: class-admin.php:1765
50
- #@ really-simple-ssl
51
- msgid "Detected setup"
52
- msgstr "Обнаружена установка"
53
-
54
- #: class-admin.php:1688
55
- #@ really-simple-ssl
56
- msgid "In the detected setup section you can see what we detected for your site.<br><br><b>SSL detection:</b> if it is possible to open a page on your site with https, it is assumed you have a valid ssl certificate. No guarantees can be given.<br><br><B>SSL redirect in .htaccess:</b> (Only show when ssl is detected) If possible, the redirect will take place in the .htaccess file. If this file is not available or not writable, javascript is used to enforce ssl."
57
- msgstr "В разделе настроек Вы видите то, что мы обнаружили на Вашем сайте.<br><br><b>Обнаружение SSL:</b> если возможно открыть страницу на Вашем сайте с помощью https, предполагается, что у Вас есть действующий сертификат SSL. Никакие гарантии не могут быть даны.<br><br><B>SSL переадресация в .htaccess:</b> (показать только, когда SSL обнаружен) Если возможно, переадресация будет проходить в файле .htaccess. Если этот файл не найден или не доступен для записи, используйте JavaScript для обеспечения работы SSL."
58
-
59
- #: class-admin.php:1694
60
- #@ really-simple-ssl
61
- msgid "In most sites, a lot of links are saved into the content, pluginoptions or even worse, in the theme. When you switch to ssl , these are still http, instead of https. To ensure a smooth transition, this plugin auto replaces all these links. If you see in the scan results that you have fixed most of these links, you can try to run your site without this replace script, which will give you a small performance advantage. If you do not have a lot of reported insecure links, you can try this. If you encounter mixed content warnings, just switch it back on. <br><br><b>How to check for mixed content?</b><br>Go to the the front end of your website, and click on the lock in your browser's address bar. When you have mixed content, this lock is not closed, or has a red cross over it."
62
- msgstr ""
63
-
64
- #: class-admin.php:1699
65
- #@ really-simple-ssl
66
- msgid "HTTP Strict Transport Security (HSTS)"
67
- msgstr "HTTP Strict Transport Security (HSTS)"
68
-
69
- #: class-admin.php:1700
70
- #@ really-simple-ssl
71
- msgid "Using this option will prevent users from visiting your website over http for one year, so use this option with caution! HTTP Strict Transport Security (HSTS) is an opt-in security enhancement that is specified by a web application through the use of a special response header. Once a supported browser receives this header that browser will prevent any communications from being sent over HTTP to the specified domain and will instead send all communications over HTTPS. It also prevents HTTPS click through prompts on browsers. "
72
- msgstr ""
73
-
74
- #: class-admin.php:1705
75
- #@ really-simple-ssl
76
- msgid "How to get an SSL certificate"
77
- msgstr "Как получить сертификат SSL"
78
-
79
- #: class-admin.php:1706
80
- #@ really-simple-ssl
81
- msgid "To secure your site with ssl, you need an SSL certificate. How you can get a certificate depends on your hosting provider, but can often be requested on the control panel of your website. If you are not sure what to do, you can contact your hosting provider."
82
- msgstr "Чтобы обеспечить безопасность сайта с помощью SSL, необходим сертификат SSL. Как вы можете получить сертификат зависит от вашего хостинг-провайдера, но часто можно запрашивать в панели управления Вашего сайта. Если вы не знаете как это делать, вы можете связаться с хостинг-провайдером."
83
-
84
- #: class-admin.php:1998
85
- #@ really-simple-ssl
86
- msgid "Force SSL without detection"
87
- msgstr "Заставить работать SSL без обнаружения"
88
-
89
- #: class-admin.php:1863
90
- #@ really-simple-ssl
91
- msgid "Save"
92
- msgstr "Сохранить"
93
-
94
- #: class-admin.php:1772
95
- #@ really-simple-ssl
96
- msgid "No SSL detected."
97
- msgstr "Никакой SSL не обнаружен."
98
-
99
- #: class-admin.php:1774
100
- #@ really-simple-ssl
101
- msgid "No SSL detected, but SSL is forced."
102
- msgstr "Никакой SSL не обнаружен, поэтому SSL не выгружен."
103
-
104
- #: class-admin.php:1778
105
- #@ really-simple-ssl
106
- msgid "An SSL certificate was detected on your site. "
107
- msgstr "Сертификат SSL был обнаружен на вашем сайте."
108
-
109
- #: class-admin.php:1791
110
- #@ really-simple-ssl
111
- msgid "https redirect set in .htaccess"
112
- msgstr "Перенаправление https установлено в .htaccess"
113
-
114
- #: class-admin.php:1832
115
- #@ really-simple-ssl
116
- msgid "HTTP Strict Transport Security was set in the .htaccess"
117
- msgstr "HTTP Strict Transport Security был установлен в .htaccess"
118
-
119
- #: class-admin.php:1834
120
- #@ really-simple-ssl
121
- msgid "HTTP Strict Transport Security was not set in your .htaccess. Do this only if your setup is fully working, and only when you do not plan to revert to http."
122
- msgstr "HTTP Strict Transport Security не был установлен в .htaccess. Сделайте это, только если все работает полностью или только тогда, когда вы не планируете вернуться к HTTP."
123
-
124
- #: class-admin.php:1727
125
- #: class-admin.php:1984
126
- #: class-admin.php:2176
127
- #@ really-simple-ssl
128
- msgid "Settings"
129
- msgstr "Настройка"
130
-
131
- #: class-admin.php:1993
132
- #@ really-simple-ssl
133
- msgid "Turn HTTP Strict Transport Security on"
134
- msgstr "Включите HTTP Strict Transport Security на"
135
-
136
- #: class-admin.php:1727
137
- #: class-admin.php:2001
138
- #@ really-simple-ssl
139
- msgid "Debug"
140
- msgstr "Отладка"
141
-
142
- #: class-admin.php:2020
143
- #@ really-simple-ssl
144
- msgid "The force ssl without detection option can be used when the ssl was not detected, but you are sure you have ssl."
145
- msgstr "Принудительное включение ssl без настройки обнаружения может использоваться, когда ssl не был обнаружен, но Вы уверены, что у Вас есть ssl."
146
-
147
- #: class-admin.php:2120
148
- #@ really-simple-ssl
149
- msgid "Are you sure? Your visitors will keep going to a https site for a year after you turn this off."
150
- msgstr "Вы уверены? Что Ваши посетители будут продолжать заходить по HTTPS на сайт в течение года после выключения."
151
-
152
- #: class-admin.php:2136
153
- #@ really-simple-ssl
154
- msgid "Are you sure you have an SSL certifcate? Forcing ssl on a non-ssl site can break your site."
155
- msgstr "Вы уверены, что у вас есть SSL: Сертификат? Принудительная установка SSL на сайте без сертификата SSL может сломать ваш сайт."
156
-
157
- #: class-scan.php:37
158
- #: class-scan.php:38
159
- #@ really-simple-ssl
160
- msgid "Scanning..."
161
- msgstr "Сканирование..."
162
-
163
- #: class-scan.php:89
164
- #@ really-simple-ssl
165
- msgid "No mixed content was detected. You could try to run your site without using the auto replace of insecure links, but check carefully. "
166
- msgstr "Не какое смешанное содержимое не было обнаружено. Вы можете выполнить тщательную проверку своего сайта не используя автоматическую замену небезопасных ссылок."
167
-
168
- #: class-scan.php:108
169
- #@ really-simple-ssl
170
- msgid "edit"
171
- msgstr "редактировать"
172
-
173
- #: class-scan.php:126
174
- #@ really-simple-ssl
175
- msgid "Scan again"
176
- msgstr "Сканировать снова"
177
-
178
- #. translators: plugin header field 'Name'
179
- #: really-simple-ssl.php:0
180
- #@ really-simple-ssl
181
- msgid "Really Simple SSL"
182
- msgstr "Простой SSL"
183
-
184
- #. translators: plugin header field 'Description'
185
- #: really-simple-ssl.php:0
186
- #@ really-simple-ssl
187
- msgid "Lightweight plugin without any setup to make your site ssl proof"
188
- msgstr "Легкий плагин, чтобы сделать ваш сайт работающим на SSL"
189
-
190
- #. translators: plugin header field 'Author'
191
- #: really-simple-ssl.php:0
192
- #@ really-simple-ssl
193
- msgid "Rogier Lankhorst"
194
- msgstr "Rogier Lankhorst"
195
-
196
- #: class-admin.php:1423
197
- #@ really-simple-ssl
198
- msgid "Major security issue!"
199
- msgstr ""
200
-
201
- #: class-admin.php:1426
202
- #@ really-simple-ssl
203
- msgid "The 'force-deactivate.php' file has to be renamed to .txt. Otherwise your ssl can be deactived by anyone on the internet."
204
- msgstr ""
205
-
206
- #: class-admin.php:1428
207
- #: class-admin.php:1494
208
- #: class-admin.php:1512
209
- #: class-admin.php:1530
210
- #@ really-simple-ssl
211
- msgid "Check again"
212
- msgstr ""
213
-
214
- #: class-admin.php:1440
215
- #@ really-simple-ssl
216
- msgid "You run a Multisite installation with subfolders, which prevents this plugin from handling the .htaccess."
217
- msgstr ""
218
-
219
- #: class-admin.php:1441
220
- #@ really-simple-ssl
221
- msgid "Because the domain is the same on all sites. You can just as easily activate ssl on all your sites."
222
- msgstr ""
223
-
224
- #: class-admin.php:1442
225
- #@ really-simple-ssl
226
- msgid "So to get rid of this annoying message, just activate networkwide."
227
- msgstr ""
228
-
229
- #: class-admin.php:1457
230
- #@ really-simple-ssl
231
- msgid "SSL was detected and successfully activated!"
232
- msgstr "SSl был обнаружен и успешно активирован!"
233
-
234
- #: class-admin.php:1470
235
- #: class-admin.php:1480
236
- #@ really-simple-ssl
237
- msgid "Really Simple SSL has a conflict with another plugin."
238
- msgstr ""
239
-
240
- #: class-admin.php:1471
241
- #@ really-simple-ssl
242
- msgid "The force rewrite titles option in Yoast SEO prevents Really Simple SSL plugin from fixing mixed content."
243
- msgstr ""
244
-
245
- #: class-admin.php:1472
246
- #: class-admin.php:1482
247
- #@ really-simple-ssl
248
- msgid "Show me this setting"
249
- msgstr ""
250
-
251
- #: class-admin.php:1481
252
- #@ really-simple-ssl
253
- msgid "The force http after leaving checkout in Woocommerce will create a redirect loop."
254
- msgstr ""
255
-
256
- #: class-admin.php:1502
257
- #@ really-simple-ssl
258
- msgid "Because your site is behind a loadbalancer and is_ssl() returns false, you should add the following line of code to your wp-config.php. Your wp-config.php could not be written automatically."
259
- msgstr ""
260
-
261
- #: class-admin.php:1520
262
- #@ really-simple-ssl
263
- msgid "Because your server does not pass the $_SERVER[\"HTTPS\"] variable, Wordpress cannot function on SSL. You should add the following line of code to your wp-config.php. Your wp-config.php could not be written automatically."
264
- msgstr ""
265
-
266
- #: class-admin.php:1693
267
- #@ really-simple-ssl
268
- msgid "Mixed content fixer"
269
- msgstr ""
270
-
271
- #: class-admin.php:1727
272
- #@ really-simple-ssl
273
- msgid "Configuration"
274
- msgstr ""
275
-
276
- #: class-admin.php:1727
277
- #@ really-simple-ssl
278
- msgid "Detected mixed content"
279
- msgstr ""
280
-
281
- #: class-admin.php:1793
282
- #@ really-simple-ssl
283
- msgid "Editing of .htaccess is blocked in Really Simple ssl settings, so you're in control of the .htaccess file."
284
- msgstr ""
285
-
286
- #: class-admin.php:1796
287
- #@ really-simple-ssl
288
- msgid "Https redirect was set in javascript because the .htaccess was not writable. Set manually if you want to redirect in .htaccess."
289
- msgstr ""
290
-
291
- #: class-admin.php:1798
292
- #@ really-simple-ssl
293
- msgid "Https redirect was set in javascript because you have activated per site on a multiste subfolder install. Install networkwide to set the .htaccess redirect."
294
- msgstr ""
295
-
296
- #: class-admin.php:1800
297
- #@ really-simple-ssl
298
- msgid "Https redirect was set in javascript because the htaccess redirect rule could not be verified. Set manually if you want to redirect in .htaccess."
299
- msgstr ""
300
-
301
- #: class-admin.php:1809
302
- #@ really-simple-ssl
303
- msgid "Try to add these rules at the bottom of your .htaccess. If it doesn't work, just remove them again."
304
- msgstr ""
305
-
306
- #: class-admin.php:1837
307
- #@ really-simple-ssl
308
- msgid "More info about HSTS"
309
- msgstr ""
310
-
311
- #: class-admin.php:1841
312
- #: class-scan.php:81
313
- #: class-scan.php:90
314
- #@ really-simple-ssl
315
- msgid "Manage settings"
316
- msgstr ""
317
-
318
- #: class-admin.php:1877
319
- #@ really-simple-ssl
320
- msgid "The mixed content scan is available when SSL is detected or forced."
321
- msgstr ""
322
-
323
- #: class-admin.php:1889
324
- #@ really-simple-ssl
325
- msgid "Log for debugging purposes"
326
- msgstr ""
327
-
328
- #: class-admin.php:1890
329
- #@ really-simple-ssl
330
- msgid "Send me a copy of these lines if you have any issues. The log will be erased when debug is set to false"
331
- msgstr ""
332
-
333
- #: class-admin.php:1898
334
- #@ really-simple-ssl
335
- msgid "To view results here, enable the debug option in the settings tab."
336
- msgstr ""
337
-
338
- #: class-admin.php:1985
339
- #@ really-simple-ssl
340
- msgid "Stop editing the .htaccess file"
341
- msgstr ""
342
-
343
- #: class-admin.php:1989
344
- #@ really-simple-ssl
345
- msgid "Auto replace mixed content"
346
- msgstr ""
347
-
348
- #: class-admin.php:2018
349
- #@ really-simple-ssl
350
- msgid "By unchecking the 'auto replace mixed content' checkbox you can test if your site can run without this extra functionality. Uncheck, empty your cache when you use one, and go to the front end of your site. You should then check if you have mixed content errors, by clicking on the lock icon in the addres bar."
351
- msgstr ""
352
-
353
- #: class-admin.php:2024
354
- #@ really-simple-ssl
355
- msgid "The HSTS option is not available for per site activated ssl, as it would force other sites over ssl as well."
356
- msgstr ""
357
-
358
- #: class-admin.php:2121
359
- #@ really-simple-ssl
360
- msgid "On multisite with per site activation, activating HSTS is not possible"
361
- msgstr ""
362
-
363
- #: class-admin.php:2122
364
- #@ really-simple-ssl
365
- msgid "You have to enable htaccess editing to use this option."
366
- msgstr ""
367
-
368
- #: class-scan.php:78
369
- #@ really-simple-ssl
370
- msgid "Mixed content detected "
371
- msgstr ""
372
-
373
- #: class-scan.php:79
374
- #@ really-simple-ssl
375
- msgid "but that's ok, because the mixed content fixer is active."
376
- msgstr ""
377
-
378
- #: class-scan.php:79
379
- #@ really-simple-ssl
380
- msgid "but the mixed content fix is not active."
381
- msgstr ""
382
-
383
- #: class-scan.php:84
384
- #@ really-simple-ssl
385
- msgid "In the tab \"detected mixed content\" you can find a list of items with mixed content."
386
- msgstr ""
387
-
388
- #: class-scan.php:98
389
- #, php-format
390
- #@ really-simple-ssl
391
- msgid "The scan searched for the following insecure links: %s"
392
- msgstr ""
393
-
394
- #: class-scan.php:100
395
- #@ really-simple-ssl
396
- msgid "List of detected items with mixed content"
397
- msgstr ""
398
-
399
- #: class-scan.php:101
400
- #@ really-simple-ssl
401
- msgid "Because really simple ssl includes a mixed content fixer you do not have to worry about this list, but if you want to disable the mixed content fixer, you can find a list of possible issues here."
402
- msgstr ""
403
-
404
- #. translators: plugin header field 'PluginURI'
405
- #: really-simple-ssl.php:0
406
- #@ really-simple-ssl
407
- msgid "https://www.really-simple-ssl.com"
408
- msgstr ""
409
-
410
- #. translators: plugin header field 'AuthorURI'
411
- #: really-simple-ssl.php:0
412
- #@ really-simple-ssl
413
- msgid "https://www.rogierlankhorst.com"
414
- msgstr ""
415
-
416
- #. translators: plugin header field 'Version'
417
- #: really-simple-ssl.php:0
418
- #@ really-simple-ssl
419
- msgid "2.2.2"
420
- msgstr ""
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
languages/really-simple-ssl.po DELETED
@@ -1,272 +0,0 @@
1
- msgid ""
2
- msgstr ""
3
- "Project-Id-Version: Really Simple SSL v2.1.14\n"
4
- "Report-Msgid-Bugs-To: \n"
5
- "POT-Creation-Date: \n"
6
- "PO-Revision-Date: 2015-08-18 08:42:00+0000\n"
7
- "Last-Translator: Rogier <rogier@rogierlankhorst.com>\n"
8
- "Language-Team: \n"
9
- "MIME-Version: 1.0\n"
10
- "Content-Type: text/plain; charset=UTF-8\n"
11
- "Content-Transfer-Encoding: 8bit\n"
12
- "Plural-Forms: nplurals=2; plural=n != 1;\n"
13
- "X-Generator: CSL v1.x\n"
14
- "X-Poedit-Language: English\n"
15
- "X-Poedit-Country: UNITED STATES\n"
16
- "X-Poedit-SourceCharset: utf-8\n"
17
- "X-Poedit-KeywordsList: __;_e;__ngettext:1,2;_n:1,2;__ngettext_noop:1,2;_n_noop:1,2;_c,_nc:4c,1,2;_x:1,2c;_ex:1,2c;_nx:4c,1,2;_nx_noop:4c,1,2;\n"
18
- "X-Poedit-Basepath: ../\n"
19
- "X-Poedit-Bookmarks: \n"
20
- "X-Poedit-SearchPath-0: .\n"
21
- "X-Textdomain-Support: yes"
22
-
23
- #: class-admin.php:845
24
- #@ really-simple-ssl
25
- msgid "No SSL was detected. If you are just waiting for your ssl certificate to kick in you can dismiss this warning."
26
- msgstr ""
27
-
28
- #: class-admin.php:848
29
- #@ really-simple-ssl
30
- msgid "I'm sure I have an active SSL certificate, force it!"
31
- msgstr ""
32
-
33
- #: class-admin.php:850
34
- #@ really-simple-ssl
35
- msgid "Scan SSL setup again"
36
- msgstr ""
37
-
38
- #: class-admin.php:859
39
- #@ really-simple-ssl
40
- msgid "SSl was detected and successfully activated!"
41
- msgstr ""
42
-
43
- #: class-admin.php:867
44
- #@ really-simple-ssl
45
- msgid "We detected a definition of siteurl or homeurl in your wp-config.php, but the file is not writable. Because of this, we cannot set the siteurl to https."
46
- msgstr ""
47
-
48
- #: class-admin.php:875
49
- #@ really-simple-ssl
50
- msgid "Because your site is behind a loadbalancer, you should add the following line of code to your wp-config.php. Your wp-config.php could not be written automatically."
51
- msgstr ""
52
-
53
- #: class-admin.php:994
54
- #: class-admin.php:1066
55
- #@ really-simple-ssl
56
- msgid "SSL settings"
57
- msgstr ""
58
-
59
- #: class-admin.php:995
60
- #@ really-simple-ssl
61
- msgid "SSL"
62
- msgstr ""
63
-
64
- #: class-admin.php:1019
65
- #: class-admin.php:1080
66
- #@ really-simple-ssl
67
- msgid "Detected setup"
68
- msgstr ""
69
-
70
- #: class-admin.php:1020
71
- #@ really-simple-ssl
72
- msgid "In the detected setup section you can see what we detected for your site.<br><br><b>SSL detection:</b> if it is possible to open a page on your site with https, it is assumed you have a valid ssl certificate. No guarantees can be given.<br><br><B>SSL redirect in .htaccess:</b> (Only show when ssl is detected) If possible, the redirect will take place in the .htaccess file. If this file is not available or not writable, javascript is used to enforce ssl."
73
- msgstr ""
74
-
75
- #: class-admin.php:1025
76
- #: class-admin.php:1227
77
- #@ really-simple-ssl
78
- msgid "Auto replace insecure links"
79
- msgstr ""
80
-
81
- #: class-admin.php:1026
82
- #@ really-simple-ssl
83
- msgid "In most sites, a lot of links are saved into the content, pluginoptions or even worse, in the theme. When you switch to ssl , these are still http, instead of https. To ensure a smooth transition, this plugin auto replaces all these links. If you see in the scan results that you have fixed most of these links, you can try to run your site without this replace script, which will give you a small performance advantage. If you do not have a lot of reported insecure links, you can try this. If you encounter mixed content warnings, just switch it back on. <br><br><b>How to check for mixed content?</b><br>Go to the the front end of your website, and click on the lock in your browser's address bar. When you have mixed content, this lock is not closed, or has a red cross over it."
84
- msgstr ""
85
-
86
- #: class-admin.php:1031
87
- #@ really-simple-ssl
88
- msgid "HTTP Strict Transport Security (HSTS)"
89
- msgstr ""
90
-
91
- #: class-admin.php:1032
92
- #@ really-simple-ssl
93
- msgid "Using this option will prevent users from visiting your website over http for one year, so use this option with caution! HTTP Strict Transport Security (HSTS) is an opt-in security enhancement that is specified by a web application through the use of a special response header. Once a supported browser receives this header that browser will prevent any communications from being sent over HTTP to the specified domain and will instead send all communications over HTTPS. It also prevents HTTPS click through prompts on browsers. "
94
- msgstr ""
95
-
96
- #: class-admin.php:1037
97
- #@ really-simple-ssl
98
- msgid "How to get an SSL certificate"
99
- msgstr ""
100
-
101
- #: class-admin.php:1038
102
- #@ really-simple-ssl
103
- msgid "To secure your site with ssl, you need an SSL certificate. How you can get a certificate depends on your hosting provider, but can often be requested on the control panel of your website. If you are not sure what to do, you can contact your hosting provider."
104
- msgstr ""
105
-
106
- #: class-admin.php:1043
107
- #: class-admin.php:1236
108
- #@ really-simple-ssl
109
- msgid "Force SSL without detection"
110
- msgstr ""
111
-
112
- #: class-admin.php:1044
113
- #@ really-simple-ssl
114
- msgid "This plugin tries to open a page within the plugin directory over https. If that fails, it is assumed that ssl is not availble. But as this may not cover all eventualities, it is possible to force the site over ssl anyway.<br><br> If you force your site over ssl without a valid ssl certificate, your site may break. In that case, remove the 'really simple ssl' rules from your .htaccess file (if present), and remove or rename the really simple ssl plugin."
115
- msgstr ""
116
-
117
- #: class-admin.php:1068
118
- #@ really-simple-ssl
119
- msgid "On your SSL settings page you can view the detected setup of your system, and optimize accordingly."
120
- msgstr ""
121
-
122
- #: class-admin.php:1077
123
- #@ really-simple-ssl
124
- msgid "Save"
125
- msgstr ""
126
-
127
- #: class-admin.php:1087
128
- #@ really-simple-ssl
129
- msgid "No SSL detected."
130
- msgstr ""
131
-
132
- #: class-admin.php:1089
133
- #@ really-simple-ssl
134
- msgid "No SSL detected, but SSL is forced."
135
- msgstr ""
136
-
137
- #: class-admin.php:1093
138
- #@ really-simple-ssl
139
- msgid "An SSL certificate was detected on your site. "
140
- msgstr ""
141
-
142
- #: class-admin.php:1106
143
- #@ really-simple-ssl
144
- msgid "https redirect set in .htaccess"
145
- msgstr ""
146
-
147
- #: class-admin.php:1108
148
- #@ really-simple-ssl
149
- msgid "Https redirect was set in javascript, because the proposed redirect for the htaccess would result in a redirect loop. I'd like to know if this happens: info@rogierlankhorst.com"
150
- msgstr ""
151
-
152
- #: class-admin.php:1110
153
- #@ really-simple-ssl
154
- msgid "Https redirect was set in javascript, because .htaccess was not available or writable, or the ssl configuration was not recognized."
155
- msgstr ""
156
-
157
- #: class-admin.php:1122
158
- #@ really-simple-ssl
159
- msgid "HTTP Strict Transport Security was set in the .htaccess"
160
- msgstr ""
161
-
162
- #: class-admin.php:1124
163
- #@ really-simple-ssl
164
- msgid "HTTP Strict Transport Security was not set in your .htaccess. Do this only if your setup is fully working, and only when you do not plan to revert to http."
165
- msgstr ""
166
-
167
- #: class-admin.php:1224
168
- #@ really-simple-ssl
169
- msgid "Settings"
170
- msgstr ""
171
-
172
- #: class-admin.php:1231
173
- #@ really-simple-ssl
174
- msgid "Turn HTTP Strict Transport Security on"
175
- msgstr ""
176
-
177
- #: class-admin.php:1239
178
- #@ really-simple-ssl
179
- msgid "Debug"
180
- msgstr ""
181
-
182
- #: class-admin.php:1256
183
- #@ really-simple-ssl
184
- msgid "By unchecking the 'auto replace insecure links' checkbox you can test if your site can run without this extra functionality. Uncheck, empty your cache when you use one, and go to the front end of your site. You should then check if you have mixed content errors, by clicking on the lock icon in the addres bar."
185
- msgstr ""
186
-
187
- #: class-admin.php:1258
188
- #@ really-simple-ssl
189
- msgid "The force ssl without detection option can be used when the ssl was not detected, but you are sure you have ssl."
190
- msgstr ""
191
-
192
- #: class-admin.php:1344
193
- #@ really-simple-ssl
194
- msgid "Are you sure? Your visitors will keep going to a https site for a year after you turn this off."
195
- msgstr ""
196
-
197
- #: class-admin.php:1358
198
- #@ really-simple-ssl
199
- msgid "Are you sure you have an SSL certifcate? Forcing ssl on a non-ssl site can break your site."
200
- msgstr ""
201
-
202
- #: class-scan.php:27
203
- #@ really-simple-ssl
204
- msgid "Scanning..."
205
- msgstr ""
206
-
207
- #: class-scan.php:59
208
- #@ really-simple-ssl
209
- msgid "currently ACTIVE"
210
- msgstr ""
211
-
212
- #: class-scan.php:61
213
- #@ really-simple-ssl
214
- msgid "currently NOT active"
215
- msgstr ""
216
-
217
- #: class-scan.php:63
218
- #, php-format
219
- #@ really-simple-ssl
220
- msgid "Auto replace script is necessary for your website (%s), because mixed content was detected in the following posts, files and options (for performance reasons the number of results is limited to 25 per type)."
221
- msgstr ""
222
-
223
- #: class-scan.php:74
224
- #@ really-simple-ssl
225
- msgid "No mixed content was detected. You could try to run your site without using the auto replace of insecure links, but check carefully. "
226
- msgstr ""
227
-
228
- #: class-scan.php:89
229
- #@ really-simple-ssl
230
- msgid "edit"
231
- msgstr ""
232
-
233
- #: class-scan.php:108
234
- #@ really-simple-ssl
235
- msgid "Scan again"
236
- msgstr ""
237
-
238
- #. translators: plugin header field 'Name'
239
- #: really-simple-ssl.php:0
240
- #@ really-simple-ssl
241
- msgid "Really Simple SSL"
242
- msgstr ""
243
-
244
- #. translators: plugin header field 'PluginURI'
245
- #: really-simple-ssl.php:0
246
- #@ really-simple-ssl
247
- msgid "http://www.rogierlankhorst.com/really-simple-ssl"
248
- msgstr ""
249
-
250
- #. translators: plugin header field 'Description'
251
- #: really-simple-ssl.php:0
252
- #@ really-simple-ssl
253
- msgid "Lightweight plugin without any setup to make your site ssl proof"
254
- msgstr ""
255
-
256
- #. translators: plugin header field 'Author'
257
- #: really-simple-ssl.php:0
258
- #@ really-simple-ssl
259
- msgid "Rogier Lankhorst"
260
- msgstr ""
261
-
262
- #. translators: plugin header field 'AuthorURI'
263
- #: really-simple-ssl.php:0
264
- #@ really-simple-ssl
265
- msgid "http://www.rogierlankhorst.com"
266
- msgstr ""
267
-
268
- #. translators: plugin header field 'Version'
269
- #: really-simple-ssl.php:0
270
- #@ really-simple-ssl
271
- msgid "2.1.14"
272
- msgstr ""
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
readme.txt CHANGED
@@ -2,11 +2,11 @@
2
  Contributors: RogierLankhorst, markwolters, hesseldejong
3
  Donate link: https://www.paypal.me/reallysimplessl
4
  Tags: SSL, https, force SSL, mixed content, insecure content, secure website, website security, TLS, security, secure socket layers, HSTS
5
- Requires at least: 4.6
6
  License: GPL2
7
  Tested up to: 5.7
8
  Requires PHP: 5.6
9
- Stable tag: 4.0.13
10
 
11
  No setup required! You only need an SSL certificate, and this plugin will do the rest.
12
 
@@ -86,6 +86,10 @@ If you are experiencing redirect loops on your site, try these [instructions](ht
86
  Yes. There is a dedicated network settings page where you can switch between network activated SSL and per page SSL. In the dedicated pro for multisite plugin, you can override all site settings for SSL on the network level, and can activate and deactivate SSL in the network menu for each site.
87
 
88
  == Changelog ==
 
 
 
 
89
  = 4.0.13 =
90
  * Fixed notice about wp config.php not writable notice even when httpOnly cookie settings already written.
91
 
2
  Contributors: RogierLankhorst, markwolters, hesseldejong
3
  Donate link: https://www.paypal.me/reallysimplessl
4
  Tags: SSL, https, force SSL, mixed content, insecure content, secure website, website security, TLS, security, secure socket layers, HSTS
5
+ Requires at least: 4.9
6
  License: GPL2
7
  Tested up to: 5.7
8
  Requires PHP: 5.6
9
+ Stable tag: 4.0.14
10
 
11
  No setup required! You only need an SSL certificate, and this plugin will do the rest.
12
 
86
  Yes. There is a dedicated network settings page where you can switch between network activated SSL and per page SSL. In the dedicated pro for multisite plugin, you can override all site settings for SSL on the network level, and can activate and deactivate SSL in the network menu for each site.
87
 
88
  == Changelog ==
89
+ = 4.0.14 =
90
+ * Improvement: when WordPress incorrectly reports that SSL is not possible, correct the resulting site health notice.
91
+ * Improvement: don't show the secure cookies notice on subsites of a multisite installation. Show on the network dashboard instead.
92
+
93
  = 4.0.13 =
94
  * Fixed notice about wp config.php not writable notice even when httpOnly cookie settings already written.
95
 
rlrsssl-really-simple-ssl.php CHANGED
@@ -3,7 +3,7 @@
3
  * Plugin Name: Really Simple SSL
4
  * Plugin URI: https://really-simple-ssl.com
5
  * Description: Lightweight plugin without any setup to make your site SSL proof
6
- * Version: 4.0.13
7
  * Author: Really Simple Plugins
8
  * Author URI: https://really-simple-plugins.com
9
  * License: GPL2
3
  * Plugin Name: Really Simple SSL
4
  * Plugin URI: https://really-simple-ssl.com
5
  * Description: Lightweight plugin without any setup to make your site SSL proof
6
+ * Version: 4.0.14
7
  * Author: Really Simple Plugins
8
  * Author URI: https://really-simple-plugins.com
9
  * License: GPL2