mikejolley/sidebar-login — Issue #10: Continued problems with FORCE_SSL_LOGIN and FORCE_SSL_ADMIN
Author: bmaupin
Created: 2012-01-03 23:10:43+00:00
State: open

Unless I'm mistaken, I don't believe commit [4942863 ](https://github.com/mikejolley/sidebar-login/commit/49428635de5ea2d4e0ef6100a90136519729da95) fixed [issue #9](https://github.com/mikejolley/sidebar-login/issues/9). Here's the problem I'm seeing:

1. Log out of wordpress
2. Define either FORCE_SSL_LOGIN or FORCE_SSL_ADMIN as true in wp-config.php (either one should ensure that logins are done over SSL)
3. Go to a non-SSL URL page that has the sidebar-login plugin
4. Monitor the POST URL using a tool such as firebug or chrome developer tools (make sure the log is configured not to clear when the page redirects after login)
5. Note that the POST URL is non-SSL, but it should be SSL. This can also be confirmed by looking at the server access logs

I offered some possible solutions in [issue #9](https://github.com/mikejolley/sidebar-login/issues/9).

Thanks!