{"id":53306,"date":"2017-01-02T07:44:52","date_gmt":"2017-01-02T07:44:52","guid":{"rendered":"https:\/\/wordpress.org\/plugins-wp\/jsm-force-ssl\/"},"modified":"2026-03-25T12:11:18","modified_gmt":"2026-03-25T12:11:18","slug":"jsm-force-ssl","status":"publish","type":"plugin","link":"https:\/\/bal.wordpress.org\/plugins\/jsm-force-ssl\/","author":9782930,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_crdt_document":"","version":"3.5.0","stable_tag":"3.5.0","tested":"6.9.4","requires":"6.0","requires_php":"7.4.33","requires_plugins":null,"header_name":"JSM Force HTTP to HTTPS \/ SSL","header_author":"JS Morisset","header_description":"","assets_banners_color":"b2d997","last_updated":"2026-03-25 12:11:18","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/surniaulula.com\/extend\/plugins\/jsm-force-ssl\/","header_author_uri":"https:\/\/surniaulula.com\/","rating":5,"author_block_rating":0,"active_installs":7000,"downloads":105770,"num_ratings":13,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","changelog"],"tags":{"3.5.0":{"tag":"3.5.0","author":"jsmoriss","date":"2026-03-25 12:11:18"}},"upgrade_notice":{"3.5.0":"<p>(2024\/09\/28) Improved PHP &#039;HTTP_HOST&#039; and &#039;REQUEST_URI&#039; server variable checks for command line execution.<\/p>"},"ratings":{"1":0,"2":0,"3":0,"4":0,"5":13},"assets_icons":{"icon-128x128.jpg":{"filename":"icon-128x128.jpg","revision":2396817,"resolution":"128x128","location":"assets","locale":""},"icon-256x256.jpg":{"filename":"icon-256x256.jpg","revision":2396817,"resolution":"256x256","location":"assets","locale":""}},"assets_banners":{"banner-1544x500.jpg":{"filename":"banner-1544x500.jpg","revision":3312270,"resolution":"1544x500","location":"assets","locale":""},"banner-772x250.jpg":{"filename":"banner-772x250.jpg","revision":3312270,"resolution":"772x250","location":"assets","locale":""}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["3.5.0"],"block_files":[],"assets_screenshots":[],"screenshots":[],"jetpack_post_was_ever_published":false},"plugin_section":[],"plugin_tags":[30632,17787,24593,727,186],"plugin_category":[54],"plugin_contributors":[79194],"plugin_business_model":[],"class_list":["post-53306","plugin","type-plugin","status-publish","hentry","plugin_tags-force-ssl","plugin_tags-insecure-content","plugin_tags-mixed-content","plugin_tags-redirect","plugin_tags-seo","plugin_category-security-and-spam-protection","plugin_contributors-jsmoriss","plugin_committers-jsmoriss"],"banners":{"banner":"https:\/\/ps.w.org\/jsm-force-ssl\/assets\/banner-772x250.jpg?rev=3312270","banner_2x":"https:\/\/ps.w.org\/jsm-force-ssl\/assets\/banner-1544x500.jpg?rev=3312270","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/jsm-force-ssl\/assets\/icon-128x128.jpg?rev=2396817","icon_2x":"https:\/\/ps.w.org\/jsm-force-ssl\/assets\/icon-256x256.jpg?rev=2396817","generated":false},"screenshots":[],"raw_content":"<!--section=description-->\n<p><strong>A simple, safe, and reliable way to force HTTP URLs to HTTPS dynamically:<\/strong><\/p>\n\n<p>No setup required - simply activate the plugin to force HTTP URLs to HTTPS.<\/p>\n\n<p>There are no plugin settings to adjust, and no changes are made to your WordPress configuration.<\/p>\n\n<p><strong>SIGNIFICANTLY FASTER than other popular plugins of this type:<\/strong><\/p>\n\n<p>Other well known plugins use <a href=\"https:\/\/secure.php.net\/manual\/en\/function.ob-start.php\">PHP's output buffer<\/a> to search &amp; replace URLs in the rendered HTML, which is a technique that is error prone and <em>negatively affects caching performance<\/em> (as changes are not cached).<\/p>\n\n<p>This plugin uses standard WordPress filters instead of PHP's output buffer for maximum reliability, performance, caching compatibility, and uses 301 permanent redirects for best SEO results (<a href=\"https:\/\/en.wikipedia.org\/wiki\/HTTP_301\">301 redirects are considered best for SEO when moving from HTTP to HTTPS<\/a>).<\/p>\n\n<p><strong>Supports advanced proxy \/ load-balancing HTTP headers:<\/strong><\/p>\n\n<ul>\n<li><code>X-Forwarded-Proto<\/code> (aka <code>HTTP_X_FORWARDED_PROTO<\/code> server value)<\/li>\n<li><code>X-Forwarded-Ssl<\/code> (aka <code>HTTP_X_FORWARDED_SSL<\/code> server value)<\/li>\n<\/ul>\n\n<p>See <a href=\"https:\/\/developer.mozilla.org\/en-US\/docs\/Web\/HTTP\/Headers\/X-Forwarded-Proto\">Web technology for developers &gt; HTTP &gt; HTTP headers &gt; X-Forwarded-Proto<\/a> for more details.<\/p>\n\n<h4>Plugin Requirements<\/h4>\n\n<p>Your web server must already be configured with an SSL certificate and able to handle HTTPS connections. ;-)<\/p>\n\n<!--section=changelog-->\n<h3>Version Numbering<\/h3>\n\n<p>Version components: <code>{major}.{minor}.{bugfix}[-{stage}.{level}]<\/code><\/p>\n\n<ul>\n<li>{major} = Major structural code changes and\/or incompatible API changes (ie. breaking changes).<\/li>\n<li>{minor} = New functionality was added or improved in a backwards-compatible manner.<\/li>\n<li>{bugfix} = Backwards-compatible bug fixes or small improvements.<\/li>\n<li>{stage}.{level} = Pre-production release: dev &lt; a (alpha) &lt; b (beta) &lt; rc (release candidate).<\/li>\n<\/ul>\n\n<h3>Repositories<\/h3>\n\n<ul>\n<li><a href=\"https:\/\/jsmoriss.github.io\/jsm-force-ssl\/\">GitHub<\/a><\/li>\n<li><a href=\"https:\/\/plugins.trac.wordpress.org\/browser\/jsm-force-ssl\/\">WordPress.org<\/a><\/li>\n<\/ul>\n\n<h3>Changelog \/ Release Notes<\/h3>\n\n<p><strong>Version 3.5.0 (2024\/09\/28)<\/strong><\/p>\n\n<ul>\n<li><strong>New Features<\/strong>\n\n<ul>\n<li>None.<\/li>\n<\/ul><\/li>\n<li><strong>Improvements<\/strong>\n\n<ul>\n<li>Improved PHP 'HTTP_HOST' and 'REQUEST_URI' server variable checks for command line execution.<\/li>\n<\/ul><\/li>\n<li><strong>Bugfixes<\/strong>\n\n<ul>\n<li>None.<\/li>\n<\/ul><\/li>\n<li><strong>Developer Notes<\/strong>\n\n<ul>\n<li>Updated <code>JsmForceSsl::force_ssl_redirect()<\/code> to use not empty() instead of isset().<\/li>\n<\/ul><\/li>\n<li><strong>Requires At Least<\/strong>\n\n<ul>\n<li>PHP v7.4.33.<\/li>\n<li>WordPress v6.0.<\/li>\n<\/ul><\/li>\n<\/ul>","raw_excerpt":"No setup required - simply activate to force HTTP URLs to HTTPS using native WordPress filters and permanent redirects for best SEO.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/53306","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=53306"}],"author":[{"embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/jsmoriss"}],"wp:attachment":[{"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=53306"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=53306"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=53306"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=53306"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=53306"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/bal.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=53306"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}