SSL on Multisite

[dskallman]

Hi,

I have s2member on a multisite installation, one of the site they want to use PayPal Pro and activate the SSL. My question is, if I add this code to wp-config.php:

Code: Select all

    <?php
    if(isset($_GET["s2-ssl"]))
        $_SERVER["HTTPS"] = "on";

Will it cause issues with the rest of the sites that don't use it?

We also have Event Espresso installed, who I have contacted separately, seems to present a conflict, noted here: http://www.primothemes.com/forums/viewtopic.php?f=4&t=14078. Is there a way to manage this within the sub-directory website? Is that an option?

Thanks,

Dana

[Cristián Lávaque]

I don't know about the Event Espresso plugin.

About the s2-ssl code, you shouldn't even need it in your wp-config.php file, that was a hack Jason suggested to that other user because her server was configured weirdly. To have a page served securely, you just add to the page the custom field s2member_force_ssl with value yes.

Once you're live, you can add the Custom Field s2member_force_ssl -> yes to any Post/Page. s2Member will buffer output on those special Posts/Pages, converting everything over to https:// for you automatically, and forcing those specific Posts/Pages to be viewed over a secure SSL connection; so long as your server supports the https protocol. This will help you eliminate the dreaded Secure/Insecure errors in Internet Explorer®. If your server runs SSL over a special port number, or your server requires the port number to actually be in the URL ( i.e. HOST:port ), you can set s2member_force_ssl -> 443; or to whatever port you need.

I hope that helps.

[dskallman]

Thanks Christian,

So we did that for this page: ynpn.org/sfba/join and it isn't loading or loading very slowly. Are you able to see it? What could be causing this to happen?

[dskallman]

It seems the Event Espresso conflict will be fixed in next release, in the mean time they recommended:

http://wordpress.org/extend/plugins/wordpress-https/

I have activated it, but still can get this page to work: https://ynpn.org/sfba/join, any thoughts?

Thanks!

[dskallman]

Hate to be pest, just checking on on any thoughts. For some reason we can't seem to get this to work.

[Cristián Lávaque]

It's odd. If I try to load https://ynpn.org/sfba/join I get redirected to http://ynpn.org/sfba/sfba/join which gives a 404. If I try to load http://ynpn.org/sfba/join (instead of HTTPS), after a long while I get this message in Firefox:

Firefox has detected that the server is redirecting the request for this address in a way that will never complete.

Have you tried deactivating other plugins to see if that lets s2Member's s2-ssl custom field work properly? (e.g. Event Espresso, WordPress HTTPS)

[dskallman]

I tried deactivating plugins and provides the same result. Can't leave Event Espresso deactivated as it is used all the time.

Working with host support they mentioned:

https://ynpn.org/sfba/ that path is also working without issues. What is not working is when you add the path to /join where the plug-in works.

Does this mean anything?

[dskallman]

After looking at it more closely with hosting support, it seems that it is tied to s2-ssl issue. The form works well without it and does not redirect. Any other ideas of what we can look at or why it isn't working?

[Jason Caldwell]

After looking at it more closely with hosting support, it seems that it is tied to s2-ssl issue. The form works well without it and does not redirect. Any other ideas of what we can look at or why it isn't working?

If I try to load https://ynpn.org/sfba/join I get redirected to http://ynpn.org/sfba/sfba/join which gives a 404

I get the same result. When I go to this page: https://ynpn.org/sfba/join, I am redirected to: http://ynpn.org/sfba/sfba/join ( notice the additional /sfba/ there? ).

When s2Member performs an SSL redirection, it converts http:// to https://, and it will add ?s2-ssl=yes onto the end of the URL. Since that's not happening here, I suspect your problem is rooted inside the /.htaccess file on your server, or even perhaps with another plugin that is attempting to rewrite and/or reformulate Permalinks on your site.

Let's start, if we may, with your .htaccess file please. Can you please post a copy of what's inside the /.htaccess file for your installation of WordPress?

In addition, I would temporarily disable one other plugin at a time to see if you can narrow this down to a plugin conflict. I understand that you need each of your plugins, but sometimes disabling them temporarily will help you narrow down a conflict so it can be resolved.

[Jason Caldwell]

Also, please post a screenshot of your WordPress -> Settings -> General & Permalink pages. Something about that extra /sfba/ makes me think this could be related to Permalink structure and/or the URLs configured to run WordPress.

[dskallman]

Hey Jason,

Thanks for your reply, here is the permalink structure they currently have:

/%category%/%year%/%monthnum%/%day%/%postname%/

Here is the current .htaccess content:

Code: Select all

# BEGIN MailPress
RewriteEngine on
RewriteRule ^mail/analytics/([l|o])-([0-9]+)-([h|p])-([0-9a-zA-Z]+).html   wp-content/plugins/mailpress/mp-includes/action.php?tg=$1&mm=$2&co=$3&us=$4 [L]
# END MailPress

RewriteEngine On
RewriteBase /
RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^index\.php$ - [L]

# uploaded files
RewriteRule ^([_0-9a-zA-Z-]+/)?files/(.+) wp-includes/ms-files.php?file=$2 [L]

# add a trailing slash to /wp-admin
RewriteRule ^([_0-9a-zA-Z-]+/)?wp-admin$ $1wp-admin/ [R=301,L]

RewriteCond %{REQUEST_FILENAME} -f [OR]
RewriteCond %{REQUEST_FILENAME} -d
RewriteRule ^ - [L]
RewriteRule  ^([_0-9a-zA-Z-]+/)?(wp-(content|admin|includes).*) $2 [L]
RewriteRule  ^([_0-9a-zA-Z-]+/)?(.*\.php)$ $2 [L]
RewriteRule . index.php [L]

I'll work through plugins one by one over night so it doesn't cause too much disruption in all website. Do you mean deactivate and activate one by one, or deactivate one by one and when they are all deactivated then reactive?

Thanks!

[dskallman]

Not sure I mentioned this, it's a multisite so .htaccess is for all but only site using SSL so far is ynpn.org/sfba.

[Jason Caldwell]

OK. Thanks. Nothing jumping right out at me yet.
By any chance do you have an /sfba/ folder on your site? That is, I know you have a WordPress Page with that slug, but do you have an actual folder /sfba/ if you look via FTP? If so, is there an .htaccess file in that directory?

[dskallman]

No sfba folder, it's all through blogs.dir and the site ID #. I don't see any .htaccess there. Any other thoughts?

Really appreciate your helping out with this Jason.

[Jason Caldwell]

Thanks for the follow-up!

Hmm. Do you have any child Blogs in your Network with the /sfba/ name, or that may have `sfba` in their name? Or... do you have any Posts/Pages saved as Drafts, or in your Trash can for WordPress, that may also have the /sfba/or a similar slug name. It really looks like WordPress itself is getting confused somehow about the location of that page. Also, I'd check to be sure you don't have any plugin installed like Simple 301 Redirects, or another plugin that might be matching /sfba/ and attempting to redirect it.

Does this problem occur if you remove the s2member_force_ssl field from the Page?
If so, can I please see a screenshot of that field as it appears in your Page editor for WP?

[dskallman]

I'll look at that more closely, would it only be the SFBA site, or could come from the main site as well? That's a good thought.

I removed the s2member_force_ssl and the page comes up fine, that's how I've left it for now. They can still use it with PayPal Pro that way, right?

Thanks Jason!

[Jason Caldwell]

I removed the s2member_force_ssl and the page comes up fine, that's how I've left it for now. They can still use it with PayPal Pro that way, right?

Interesting, so if you remove this it works fine. Hmm, I'd like to have a closer look at this, if possible. If you can, please send me a Dashboard login and/or FTP access to your /wp-content/ directory through this private contact form. I'll run some diagnostics to determine what's happening exactly. http://www.s2member.com/contact/

[dskallman]

I just completed a deactivation of network plugins and it seems Event Espresso is causing the URL to redirect from what it should be:

https://ynpn.org/sfba/join/?s2-ssl=yes

to this:

http://ynpn.org/sfba/sfba/sfba/sfba/sfb ... s2-ssl=yes

I am in touch with the developer to see if we can figure it out on that end. We cannot leave that plugin deactivated as it's used on all sites on the network.

The only other thing I noticed when I had Event Espresso deactivated is that the correct SSL page loaded, but it took over 2 minutes to load. Any thoughts on why it would load so slowly?

Thanks for all your help Jason!

[dskallman]

Oh and can we use the pro forms & PayPal pro without forcing SSL on that page?

[Cristián Lávaque]

Oh and can we use the pro forms & PayPal pro without forcing SSL on that page?

No, it's a requirement by PayPal that you have SSL for security reasons.

[dskallman]

We removed the SSL issue from the Event Espresso plugin, so that is not the issue anymore. The page now loads, but loads extremely slowly. You can see here: https://ynpn.org/sfba/join/. Why would it be loading so slowly? Have you seen this issue before?

[Jason Caldwell]

I just ran your site through Firebug.
It looks like this content is taking a VERY long time to load:

Code: Select all

https://static.nrelate.com/common_wp/0.03.0/nrelate-panels-common.min.css

Most likely because the server: static.nrelated.com does not support the HTTPS protocol. I would try getting rid of that file dependency, or move it to a server that supports the HTTPS protocol so it does not hang up your site like this.

[dskallman]

Thanks Jason, really appreciate your responses and support!