Finally moved a static porftolio to HTTPS. Certificate installed, the host says it's valid, the checker says it's valid. But visitors see a padlock with a warning triangle.
I think it has to do with a web font still loading over plain http, but I have no idea where those links come from. I didn't hardocde anything, at least not on purpose. How do I find every insecure reference without reading every file by hand?
ok so the console lists a web font from my own dmoain with http://, plus one old embed from a third party.
oh ive been there lol open DevTools > Console, each mixed content warning names the exact insecure URL: Mixed Content: The page at 'https://...' was loaded over HTTPS, but requested an insecure resource 'http://...'. Collect those URLs; teh domain and path usually tell u whether it's theme code, uploaded content or a third-party embed.
been there man for WordPress, old URLs live in the database. Use WP-CLI: wp search-replace 'http://example.com' 'https://example.com' --all-tables --dry-run, check the count, then run it without --dry-run 🔥 it handles serialized data safely, unlike a raw SQL replace 🤦 take a database backup first. worked for me anyway 🤷
Sign in or create an account to reply.
