WPIntell

Source evidence

Broken website

LH HSTS · support · 2017-06-02T13:20:00+00:00

complaintsentiment
highseverity
1.0relevance
8replies
Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

6 / 32 rows with source links

18.8% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

26 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support
cjc1867 unresolved
Just installed this plugin and it completely broke my website. ‘Too many redirects try clearing cookies’ Tried it again and the famous white screen of death….. How can this be fixed? This is highly likely go to another plugin actually doing this. Basically this plugin simply redirects to the https version and send a header for your browser to remember to go to the https version in the future. So if another plugin (or even a server rule) is redirecting back to the http version then what you are saying could happen. As such can you try deactivating all other plugins and let me know if this solves things? Failing that can you let me know the website with the issue and I’ll look at the headers? Hi Thanks for contacting me, my website was built from https from the start obviously with an SSL certificate installed so really I shouldn’t have to redirect it to https or have I got that wrong? The website is https://towywebdesigns.uk I did a test on https://httpschecker.net/ and it said I wasn’t using hsts so I am trying to implement it and I got the problems mentioned above. Also, the address bar had my website URL and a repeat of my WordPress directory in it so causing the so many redirects. i.e. https://mydomain.uk/mydirectory/mydirectory/mydirectory……etc . I have not come across this problem before or understand what’s going on but I would like to get it fixed. Thanks Colin The redirect only happens when someone requests the http version, as I said my plugin will then redirect the user to the https version ANd send some headers telling the browser to remember to only access the site from the https version (this is essentially what hsts is). As I said it is likely another plugin causing the issue. Can you try deactivating them? If you are reluctant too then you can often add hsts without a plugin through Htaccess: https://www.a2hosting.com/kb/security/ssl/enabling-http-strict-transport-security-hsts-for-your-site I am resolving this for good order. If you have eliminated other plugins then repost on the thread as i will be monitoring it I have the same issue. I get an infinite redirect when I try to activate LH HSTS. The main site works fine, but all subdirectory sites have too many redirects. https://blogs-dev.princeton.edu/wdstest/ https://blogs-dev.princeton.edu/hsts-test/ I deactivated all plugins, including mu-plugins, and I then reactivated LH HSTS. Too many redirects occurred trying to open “https://blogs-dev.princeton.edu/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/”. /wp-admin works fine on both the main site and the subdirectory sites. Okay you’ve done the right thing, can you confirm you are using Multisite subdirectory? Sorry for the delay in responding. We have a setup that mixes subdomains and subdirectories in the same multisite system. So when LH HSTS is activated, subdomain sites are fine, but subdirectory sites get the infinite redirects. https://blogs-dev.princeton.edu (main site, okay) https://blogs-dev.princeton.edu/wdstest/ (subdirectory site, infinite redirects) https://perla-dev.princeton.edu (subdomain site, okay) okay thansk I’ll look at the code and try to work out what would be hapeening Pete

Comments

8 shown
shawfactor 2017-06-02T14:22:00+00:00

This is highly likely go to another plugin actually doing this. Basically this plugin simply redirects to the https version and send a header for your browser to remember to go to the https version in the future. So if another plugin (or even a server rule) is redirecting back to the http version then what you are saying could happen. As such can you try deactivating all other plugins and let me know if this solves things? Failing that can you let me know the website with the issue and I’ll look at the headers?

cjc1867 2017-06-02T17:44:00+00:00

Hi Thanks for contacting me, my website was built from https from the start obviously with an SSL certificate installed so really I shouldn’t have to redirect it to https or have I got that wrong? The website is https://towywebdesigns.uk I did a test on https://httpschecker.net/ and it said I wasn’t using hsts so I am trying to implement it and I got the problems mentioned above. Also, the address bar had my website URL and a repeat of my WordPress directory in it so causing the so many redirects. i.e. https://mydomain.uk/mydirectory/mydirectory/mydirectory……etc . I have not come across this problem before or understand what’s going on but I would like to get it fixed. Thanks Colin

shawfactor 2017-06-03T01:04:00+00:00

The redirect only happens when someone requests the http version, as I said my plugin will then redirect the user to the https version ANd send some headers telling the browser to remember to only access the site from the https version (this is essentially what hsts is). As I said it is likely another plugin causing the issue. Can you try deactivating them? If you are reluctant too then you can often add hsts without a plugin through Htaccess: https://www.a2hosting.com/kb/security/ssl/enabling-http-strict-transport-security-hsts-for-your-site

shawfactor 2017-06-10T08:30:00+00:00

I am resolving this for good order. If you have eliminated other plugins then repost on the thread as i will be monitoring it

Michael 2017-09-21T21:27:00+00:00

I have the same issue. I get an infinite redirect when I try to activate LH HSTS. The main site works fine, but all subdirectory sites have too many redirects. https://blogs-dev.princeton.edu/wdstest/ https://blogs-dev.princeton.edu/hsts-test/ I deactivated all plugins, including mu-plugins, and I then reactivated LH HSTS. Too many redirects occurred trying to open “https://blogs-dev.princeton.edu/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/wdstest/”. /wp-admin works fine on both the main site and the subdirectory sites.

shawfactor 2017-09-22T01:27:00+00:00

Okay you’ve done the right thing, can you confirm you are using Multisite subdirectory?

Michael 2017-09-27T18:50:00+00:00

Sorry for the delay in responding. We have a setup that mixes subdomains and subdirectories in the same multisite system. So when LH HSTS is activated, subdomain sites are fine, but subdirectory sites get the infinite redirects. https://blogs-dev.princeton.edu (main site, okay) https://blogs-dev.princeton.edu/wdstest/ (subdirectory site, infinite redirects) https://perla-dev.princeton.edu (subdomain site, okay)

shawfactor 2017-09-28T04:07:00+00:00

okay thansk I’ll look at the code and try to work out what would be hapeening Pete