SSL for WordPress Admin and the Problem with XMLHttpRequest


Note! The updates to SSL handling in WordPress version 2.6 address the problem of SSL-encrypted admin sessions in a much less hackish sort of way. It doesn’t make any sense to use this plugin with WordPress version 2.6 when you can simply add define(’FORCE_SSL_ADMIN’, true); to your wp-config.php file.

The WordPress Codex has documentation for running the login, registration, and administration interfaces on an SSL server. There is even a plug-in that will do much of the heavy lifting for you. I have found both of these methods, by themselves, to be rather unsatisfactory, though, in that admin services that rely on AJAX calls back to WordPress break (such as the periodic saving of drafts). What happens is this:

This is a preview of SSL for WordPress Admin and the Problem with XMLHttpRequest. Read the full post (407 words, estimated 1:38 mins reading time)
Also tagged , , , ,