If SSL is enabled on your webserver, you should definitely use it to protect your wp-admin directory a bit more. Activating SSL on your WordPress blog is definitely easy. Just read one.
What is SSL? According to Wikipedia:
"SSL is a cryptographic protocol that provide security and data integrity for communications over TCP/IP networks such as the Internet. TLS and SSL encrypt the segments of network connections at the Transport Layer end-to-end."
In other words, SSL can secure transactions over the internet.
Not all hosting services allows you to use SSL. Though, if you're hosted on Wp WebHost or HostGator, then SSL is enabled.
Once you checked that your webserver can handle SSL, opne your wp-config.php file (Located at the root of your WordPress install) and paste the following:
define('FORCE_SSL_ADMIN', true);
Save the file, and you're done!
If you enjoyed this article, please consider sharing it!
Leave a Comment
- ModThemessave 15% off your purchase […]
- Zidalgo Themessave 20% on your order […]
- WooThemessave 20% on your purchase […]
- Autobloggedsave $40 on multi-site licence […]
- Kreative Themessave 50% on your purchase […]
- Smarter Themesave $5 on your order […]
- Classipress Themesave 20% on your purchase […]
- ReviewAZONsave $15 on your order […]
- Headway Themeget 20% off your licence […]
- Gorilla Themesget 10%off any theme […]
Theme & content : Copyright © 2008 - 2010 Jean-Baptiste Jung. Graphic art by GreenBubbles.org.ua, all right reserved.
11 Responses
Doesn’t work on 1and1 managed private servers.
Great post. It’s a good way to protect our WordPress.
Hi, Doesn’t work right away when you have virtualhosts in Apache only configured for http-access. You need to somehow also configure the same virtualhosts for ssl-based apache config. Without that this will fail. (i found out by trying). Now I have to figure out how to enable the virtualhosts for ssl as well (prefereably without doing a lot of work for all sites…)
hints welcome…
Interesting.. in your post you refer to both SSL and SSH. Can you explain the difference between the two?
Thanks for the recipe, btw!
@Jeff Starr: SSH was a stupid typo, sorry for for this. SSL is Secure socket layer and SSH is Secure Shell, a way to connect to a server as Telnet does, but in a more secure version.
Thanks !
Use it ..
Yes, i agree with you. The time has come to use SSH as much as possible, even on login pages, if we want to stay secured as much as possible. Thanks for sharing.
Thanks for the tip Jean!
About WPWebHost’s SSL, how surprising they told me: Sorry to inform that we do not have Shared SSL for user usage.
By the way neither do they support mod_deflate nor any other alternatives. Both information came from their customer service so it can’t be wrong isn’t it?
Do you have anything to share with us? Thanks in advance.
Trackbacks: