Author: Leon Wimmenhoeve
Manually adding recommended security headers on WordPress
This article will explain how to manually add the recommended security headers to your website. For more advanced security headers or automatically add the security headers, please consider subscribing to Really Simple SSL Pro. Security headers will add additional protection for your websites visitors. The security headers We will show you some of the security headers, and how to add them manually. When you need to know more, or are interested in more advanced security headers, visit this article. HSTS
Why is my site still not secure?
Really Simple SSL is designed to enable SSL with one click. It couldn’t be any easier! For over 95% of sites that install Really Simple SSL, this one click will do the trick. While you are here, I suppose that you are one of the other 5%. Don’t worry, we’re here to help! In this article we’ll summarize the most common issues, along with instructions on how to solve these issues. Please note: With the exception of cause nr. 1
Changelog
Looking for the changelog of Really Simple SSL & Really Simple SSL Pro? Below instructions will work for other plugins as well: How to access the changelog Go to your WordPress plugins overview. Find Really Simple SSL and click on “View Details” Click on the “Changelog” tab. Our changelog can be read as follows. The screenshot shows 3.3.5 in terms of releases this means (major release) . (minor release) . (tweaks or bugfixes). The most common practice is major release
How to install an SSL certificate on Apache
If you have generated your Let’s Encrypt certificate with Really Simple SSL, and you don’t have any of the automated installation options (shell, cPanel with API, Plesk with API or Cloudways), you’ll need to install the SSL certificate manually on your Apache server. Download your certificate files At the end of the Let’s Encrypt SSL certificate generation in the Really Simple SSL wizard, you see several buttons allowing you to download the required files: a certificate.crt and a private.pem file.
WordPress website keeps logging me out in back-end after I switched to SSL
In certain cases, you might come across the issue that after you’ve switched the website to SSL: it immediately logs you out, every time the page is reloaded. Most of the times, the cause of this issue is that somewhere in the code the domain is still being forced to the http:// domain. In the most recent case that we came across, the user had the following code in their theme’s functions.php file: update_option( ‘siteurl’, ‘http://domain.com’ ); update_option( ‘home’, ‘http://domain.com’