Wordpress: On admin pages favicon is not loaded over https - php

As said on the title, whenever I log to my admin page in Wordpress I get this notice in console:
Mixed Content: The page at 'https://site-url' was loaded over HTTPS, but requested an insecure favicon 'http://site-url/wp-content/uploads/2017/06/cropped-cropped-logo-square-192x192.png'. This content should also be served over HTTPS.
Also, I tried to load another favicon using Appearance->Customize, but it is still loaded over HTTP.
Is this a Wordpress bug? or how can I solve this so this warning does not appear?

For everyone still searching:
Go to: Settings - General and change http to https in both URLs

Related

Wordpress site changed to HTTPS from HTTP after reinstall. And does not see some of the pictures

I changed some files in config sites and my site broke. So I reinstalled wordpress and replace in the new install wp-admin, wp-content, wp-includes with old folders. Used the same database. Now my site is only working on https not on http like it was before and it fails to load certain images and thumbnail. When i am inspecting the page the images have the 404 error and they work when replacing their url from http to https. Is there a general fix for that? What should i do.enter image description here
you might want to re-sync all the files on your website with this plugin. https://wordpress.org/plugins/media-sync/, some of the file url might be still on the "http" that's why when you access the website with https it wont load.

How can resolve Mixed Content: with Wordpress with HTTPS and can't access to admin?

I've a server with 3 Wordpress. With one of them, I've changed (add an "s" after http) two URL in General Settings Wordpress Adress and Site Adress.
Since I've do that, I'had ERR_TO_MANY_REDIRECT error. So I've add theses lines in my wp-config file :
define('WP_HOME','http://www.mywebsite.com/wordpress/');
define('WP_SITEURL','http://www.mywebsite.com/wordpress/');
And now I've an error Mixed Content: The page at '<URL>' was loaded over HTTPS, but requested an insecure script '<URL>'. This request has been blocked; the content must be served over HTTPS.
A lot of files (like CSS) is not recognised and I'can't access to my wp-admin.
I don't know what to do and I don't understand why the problem is on my 3 wordpress if I had change that in one of them...
Can you help me please ?
I've found a solution :
Comment my rules for HTTPS in my .htaccess.
Access to my wp-admin ( I can access now )
Install the plugin SSL Insecure Content Fixer
Now I can access to my different Wordpress in HTTPS
When you host a site on secure domain i.e. (https://) you cannot use insecure URL's in your files (http://) so the options with you are you use SSL on other servers as well.
You can try Certbot for installing SSL certificate on your other servers.

Mixed content in com_content in Joomla 3.x

I have my page and the console shows error:
Mixed Content: The page at 'https://abcde.com/blog' was loaded over HTTPS, but requested an insecure XMLHttpRequest endpoint 'http://abcde.com/?option=com_content&id=0&task=ajax&page=0&lang=pl-PL&extra_page_only=0'. This request has been blocked; the content must be served over HTTPS.
I search in my com_content but there is no reference to http or https
<a href="/index.php?option=com_content&id=<?php echo $this->id;?>&task=<?php echo $this->ajax;?>&page=<?php echo $this->next;?>&lang=<?php echo $this->lang;?>&extra_page_only=<?php echo $this->extra_page_only;?>">
Where should I search for answer? Where is it defined globally to change http:// into // ?
Thank you!
This issue happens when you have an HTTPS redirect in your .htaccess file, but you have not modified your Joomla configuration settings to use HTTPS. As the previous answer stated, you can do that by going to the System -> Global Configuration page, and then clicking on the Server tab, and finally changing the value of "Force HTTPS" to "Entire Site".
Log in to the back end of the website and set System -> Global Configuration -> Server -> Force HTTPS to "Entire Site".

Error 404 with subdomain in ssl

Hello i got an Error 404 with subdomain in ssl
when i run panel.terahost.org in https
i get a blank page https://panel.terahost.org
i found the error in
error is
''This page is trying to load scripts from unauthenticated sources''
its trying to show unsafe script which is uploaded up there on secured page
note the panel is in orginal its uploaded here
46.166.168.175/Tera-Host/index.php
but i use this script to show it up
https://www.mediafire.com/?87syl3od21qdemy
You should have wildcard ssl for subdomains to work. If you have wildcard then also it is showing that error then please check your html rendering. You should have https in front of all your urls on page. If your html have any link of http then it will show this error. I can see that you have frame of page with url http://46.166.168.175/Tera-Host/index.php change it to https.

Wordpress custom theme's 404.php > Does Google see it as a true 404 redirect?

WordPress allows theme designers to place a 404.php file in their theme's directory. This enables you to provide a custom page content when the WordPress application forwards the 404 over to your 404.php page.
My question is this: Does this constitute a true 404 error that would be registered as such by Google and other crawlers, or does the fact that Wordpress intercepts the request and passes it to the physical 404.php page mean that no true 404 has occurred?
Wordpress's default page does not seem send a 404 header, which is required to signal a missing page to a crawler. From WordPress Codex: Creating an error page:
Tips for Error Pages
There are various improvements you can make to your 404 Error web pages so let's look at some of your options.
Sending Proper Headers
By default, WordPress continues to send 404 pages as if they were fine. To make search engines like Google spider these pages correctly, you can add this line to the top of your theme's 404.php file.
However, directly beneath that is a line saying "this is no longer necessary in the latest versions of WordPress", whatever that means. You may still want to check whether the 404 page sends any headers using Firefox's Web Developer Extension or Firebug.
I suggest looking at the headers for the page using the Firebug Net tab, or the Firefox Live HTTP Headers add on. If your server sends HTTP 200, it will be seen as a normal page of course. Using one of these tools, you'll be able to see whether it is indeed sending a 404 status code for the page.
I can say that in the latest version of Wordpress, it does send a 404 status, so Google (and other crawlers) will treat it as a proper dead link.
Wordpress does send a 404 header with the current versions (3.1.x).
I regularly see reports or google seeing 404 pages in my google webmaster tools account.
What I use and would recommend to combat 404's is a plugin called true Google 404 (you can find it here: wordpress.org/extend/plugins/true-google404/ )

Categories