ECP Appears to be Breaking Our 100% SSL

[Chris]

Hi there,
We have several secure order forms on our site and use the “Enable SSL” option on them. However, they are still coming up with some insecure page elements. When we look at the source code… EVERYTHING else on the page is getting changed without a problem to https:// with the exception of the ECP code:

link rel=’stylesheet’ id=’full-calendar-pro-style-css’ href=’http://XXXXX.org/wp-content/plugins/events-calendar-pro/resources/tribe-events-pro-full.css?ver=3.7.1′ type=’text/css’ media=’all’

link rel=’stylesheet’ id=’tribe_events-calendar-pro-style-css’ href=’http://XXXXX.org/wp-content/plugins/events-calendar-pro/resources/tribe-events-pro-theme.css?ver=3.7.1′ type=’text/css’ media=’all’

How can we fix this so the page loads 100% securely?

Thanks,
Chris

[Barry]

Hi Chris,

Sorry for the delay first of all – I’m not sure how we missed this one but we do try hard to respond within 24hrs of posting during the working week and obviously didn’t quite catch this.

We have several secure order forms on our site and use the “Enable SSL” option on them.

Can I ask if what you are using to generate these forms – and is that plugin solely responsible for enforcing that the page is served via HTTPS, or are you using any additional plugins like to help with this?

Thanks!

[Chris]

This reply is private.

[Chris]

Hi there – it’s been several weeks…. any response to this?

[Barry]

I’m very sorry for the delay, first of all. For some reason I haven’t been receiving notifications for this thread in particular, please accept our apologies.

I’m not sure why this problem with our enqueued stylesheets not adopting the correct URL scheme would occur – we’re not enqueuing scripts in a particularly different way to, for example, a default theme like Twenty Twelve.

That said, looking at the sample page you provided I see that the full-calendar-pro-style-css and tribe_events-calendar-pro-style-css are indeed now being served via HTTPS, at least on that page. Have you resolved this / did you find and fix the root cause?

[Chris]

Hi Barry,
Thanks for the response.
Actually, we didn’t find an easy fix. The popular Better WP Security was offering the “Enable SSL” option for pages, and it worked great with every other plugin we use, except the the Event Calendar Plugin code. Since yours is the only plugin it wasn’t working with, I’m guessing it has to be something with ECP not playing nice with BWS. We used another HTTPS WP plugin and had to manually go through every page/form to enable the plugin unfortunately. Seems like it’s working now, but still never got to the root cause unfortunately.

[Barry]

That’s unfortunate (though good you did get to a point where it ceased to be a problem, even if it took some legwork).

When we enqueue stylesheets we are using WordPress-defined constants to build the URL, which in turn are built (partly) using the site_url option. I don’t think that’s an uncommon pattern by any means and am unsure why a helper plugin wouldn’t simply filter that option to ensure an HTTPS version of the site URL is returned – however hopefully you’re all good for the time being.

[Barry]

It’s been a while so I’ll go ahead and close this thread. Of course if you need further help for this or any other issue please do feel free to create a new thread or threads as needed. Thanks!

[Author]

Posts