I have had FORCE_SSL_ADMIN set for quite awhile now in my wp-config.php file which forces all traffic to /wp-admin/ to be HTTPS. When I initially configured this setting it broke numerous WordPress plugins which I fixed however I missed MM-Forms being broken. The issue was the exact same as previous plugins that had the issue so it wasn’t to hard to fix but I wanted to share in case anyone else is having trouble getting the MM-Forms plugin working over SSL. Below I will explain what lines need to be changed to get MM-Forms working over HTTPS including syntax, line numbers, and old code.
I recently installed the Youtube With Fancy Zoom WordPress plugin on one of my personal web sites so I could upload and display videos of my daughters. This plugin allows you to upload videos to the YouTube, reference them in your WordPress admin, and then display them in a nice pop up window on your website. This way they are streamed from YouTube but the person visiting your site doesn’t have to leave your site to view the video.
I have been having a problem with the media browser uploader for a couple days since I enabled FORCE_SSL_ADMIN in my wp-config.php file. I finally got some time tonight to look into the issue and I am embarrassed it took me so long to resolve. This was a classic example of trying to make something more complicated than it really was. The issue ended up being with a WordPress plugin I had installed called Flexible Uploader. This plugin provides all the functionality of the flash media uploader to the browser media uploader. It turns out that this plugin has not been updated in a long time and some of the URL building functions have changed in the newer versions of WordPress. Below I explain how to easily resolve the issue.
There are many tricks or little configuration items you can use to make your WordPress powered site more secure than it comes by the default install. One of those items is to require the login to happen over HTTPS and require that all WordPress admin traffic takes place over HTTPS as well. I personally also use a plugin called WP Block Admin to only allow users with certain credentials access to wp-admin so consider looking into that as well if you have areas of your site that are not in the admin section that require users to login like a forum or to leave comments.