If you’re hosting a WordPress website, you might run into some of the following SSL issues and warnings.
- When you view your site over SSL, mixed content warnings are displayed in inspect element
- Your site does not automatically redirect to SSL
The question is how to address these issues and here are some tips.
The quickest way to get rid of Mixed Content warnings is to use the Real Simple SSL plugin. The plugin will detect HTTP content and make sure it’s served over HTTPS (SSL).
The benefit of the Real Simple SSL Plugin is that your problem will be fixed straight away.
The drawback of this plugin is that (1) You now have yet another plugin in the system (2) If you decide to uninstall it, you’re back to square one with mixed content.
Search and Replace in Database
To permanently get rid of the problem and not use any plugins, you have to do a search and replace in the database. We recommend using Better Search and Replace. If you’re using this tool, search for all occurrences of http://xyz.com and replace with https://xyz.com.
Tools
To further analyse why your pages are not fully secure, check out this tool:
https://www.whynopadlock.com/
Caveats
Please note that if your site has always just been HTTP and you’re moving over to HTTPS there are some SEO considerations and you might have to make some adjustments in your Google Analytics.
References:
How to Quickly Fix WordPress Mixed Content Warnings (HTTPS/SSL)