Force SSL everywhere wordpress plugin resources analysis
| Download This Plugin | |
| Download Elegant Themes | |
| Name | Force SSL everywhere |
| Version | 1.0 |
| Author | Bostjan Cigan |
| Rating | 50 |
| Last updated | 2013-05-05 05:07:00 |
| Downloads |
3049
|
| Download Plugins Speed Test plugin for Wordpress | |
Home page
Delta: 0%
Post page
Delta: 0%
Home page PageSpeed score has been degraded by 0%, while Post page PageSpeed score has been degraded by 0%
Force SSL everywhere plugin added 0 bytes of resources to the Home page and 7 bytes of resources to the sample Post page.
Force SSL everywhere plugin added 0 new host(s) to the Home page and 0 new host(s) to the sample Post page.
Great! Force SSL everywhere plugin ads no tables to your Wordpress blog database.This is a very simple plugin that forces SSL on all pages when a user is logged in (not only on admin ones).
Why would you need it? If you force SSL usage only in the admin area, and use HTTP as your blog URL, then some links and buttons in the admin area revert to HTTP. This flaw is fixed by this plugin. If you want to check out details about session hijacking, you can view the screencast and the following post on my blog - Wordpress Session Hijacking and Prevention.
How does it work?
- A user logs in,
- a cookie is set that is sent only through HTTPS,
- all pages are redirected to HTTPS,
- Wordpress checks if this cookie is set,
- if not, the user is logged out.
This effectively prevents session hijacking and man in the middle attacks.
