How-Secure-WordPress-Pages-Posts-with-SSL-WordPress-HTTPS
How to Secure WordPress Pages or Posts with SSL (WordPress HTTPS )

How to Secure WordPress Pages or Posts with SSL (WordPress HTTPS )

Nur . Posted in How-To, Plugins 737 Views

We can use SSL certificate to secure your WordPress pages to increase the security of content. You can read about SSL (secure socket layer) on: SSL which explain, it is a protocol to send  data in an encrypted and secure form between browser (clients side ) and web server for secure communication and secure  (https://)  identification of a network server. HTTPS connects on port 443, while HTTP is on port 80.

Why use SSL (https://):


There are lots of reasons to use SSL on WordPress Powered websites and blogs pages. If you’re going to run an online store or ecommerce Web site developed on WordPress, you have to use  HTTPS for payment process. If you have very sensitive information and need to send to client in a secure way which can be packet sniffer for stealing items like credit card or login details.

In case if you are using WordPress for health Professional relatd website, need to secure patients details for online booking appointment to make it confidential. As well, if you are collecting donation and need to authorise the donation process. So its better to secure data on-line by requesting client to download certificate on your machine first and than continue the process of payment or for any other data transfer. In a simple way we should use SSL  to Boost Customer Confidence in your Web SitesGravity Forms is the best WordPress plugins for creating forms which gives a very high customization flexibility for content. In addition, you get the complete support once you have purchased the Gravity forms plugin form the website.

How to acquire and set-up   SSL work?


The most important and first thing is to have a Certificate on your hosting platform. Most of the hosting companies provide you to buy a certificate with different prices as follow:

HostGatorThere are two ways to obtain an SSL Certificate for your website.  You may obtain the SSL Certificate from HostGator, and we will install it for you for free, or you may obtain an SSL Certificate elsewhere, and we will install it for a $10 fee (in most cases).

WPWebHost: With GeoTrust SSL certificates you can start conducting secure online transactions with confidence, quickly and cost-effectively. All of our SSL certificates enable up to 256-bit encryption and can be used to secure servers used for Web sites, intranets, extranets and other online applications.

Go Daddy: Protect transactions and customer data with a SSL Certificate. Standard SSL £43.99/year - Verifies your domain control & secures your site.

Hostmonster:  eCommerce features will SSL secure server

There are other ways to get your SSL  certificate on your hosting , so you should consult with your hosting provider company. I am not going to in detail about how to get your own SSL certificate, although its possible to have create your own private and publick kies and install requesting publik key to install on client machine, but you for better understanding you can read this article Secure SSL Certificate.

Securing Posts and Pages Via SSL


After installing the certificate on your server to secure the sensitive resource, type your web page or post’s URL with https://,  It will ask you to install the valid certificate on client side’s browser.  you will see a padlock in your browser bar. There are WordPress Plugins to protect the posts or pages as follows:

WordPress HTTPS (SSL)

If you’re having partially encrypted/mixed content errors or other problems, please read the FAQ. If you’re still having trouble, please start a support topic and I will do my best to assist you.

Detail

SSL Insecure Content Fixer

 It’s quite common to use WordPress as the host for an online shop, and that often means having an order page that needs to be encrypted via SSL. You don’t want your customers providing credit card details or other sensitive information over an unencrypted connection! But some WordPress plugins don’t take SSL into account, and merrily load scripts and stylesheets without encryption. This plugin attempts to fix this problem, where there are simple solutions. How it does this is described in this blog post.

Detail

WPSSL (WordPress with SSL)

This plugin will force a WordPress post or page to use https instead of http. It is based off of “Dwamian’s Per Page Force SSL” plugin, but this has been updated for us with WordPress 3.x. Additionally, when a page is “forced” into SSL mode, it will make sure that all page elements are loaded via https (so that you won’t get warnings). If you have to link to a 3rd party external file, use the wpssl_showlink function (it will switch it between https and http).

Detail

Restrict Content Pro – Stripe Payment Gateway

When using this add-on, your subscribers will stay on your site throughout the entire registration process, instead of being redirected to an outside site, such as PayPal. The user simply enters their credit card information and clicks Register.

Securely Process Credit Cards: All credit card transactions are processed securely through Stripe and no sensitive information is ever stored on your server.

Note: you should still always have a valid SSL certificate installed on your registration page.

Detail

Admin SSL

Admin SSL secures login page, admin area, posts, pages – whatever you want – using Private SSL. Once you have activated the plugin please go to the Admin SSL config page to enable SSL, and read the installation instructions.

Detail

There is an other way to give the admin and login page to get SSL sertificate through adding two lines of code in wp-config file as it will force all admin and other users to login through secure httpts: page. The detail about Securing Admin on Administration_Over_SSL:

define(‘FORCE_SSL_LOGIN’, true);
define(‘FORCE_SSL_ADMIN’, true);

If you want to check your WordPress vulnerabilities, use the online security scanners that provide the web application security testing, network security testing and information gathering facilities: Vulnerability Scanners Online.

If you still required any information about WordPress security and want to secure your sensitive information on a WordPress more secure, feel free to leave a comment of  Wparena facebook fan’s page  or in a comment box below. For all inquires regarding theme development, SEO and Security issues related to WordPress, email: info at wparena.com.

Nur

I am a Wordpress, Website Developer and Designer, creator @ WP Arena, Provide Free WordPress consultation and can help to install WordPress in a secure way to small businesses and bloggers.

Free & Professional WordPress Security Service Free & Professional WordPress Security Service

We Love WordPress. WordPress Arena is a place for WordPress Developers and Designers, providing Tips, tricks, tools and resources to build a website or blog on WordPress. We also present The WordPress Showcase for all kind of WordPress Powered Websites.


Copyright © 2014 WP Arena All Rights Reserved

Divi WordPress Theme