Image file urls still point to http instead of https

That’s because the image (media) URL is stored as part of the record in the posts table. (Images/media are another type of post.) You have several choices: Manually change each media URL to https. This might take a while if you have lots of pictures. Not really recommended. Use phpMyAdmin to change the value. There … Read more

Human readable format for http headers with tcpdump

Here’s a one-liner I came up with for displaying request and response HTTP headers using tcpdump (which should work for your case too): sudo tcpdump -A -s 10240 ‘tcp port 4080 and (((ip[2:2] – ((ip[0]&0xf)<<2)) – ((tcp[12]&0xf0)>>2)) != 0)’ | egrep –line-buffered “^……..(GET |HTTP\/|POST |HEAD )|^[A-Za-z0-9-]+: ” | sed -r ‘s/^……..(GET |HTTP\/|POST |HEAD )/\n\1/g’ It … Read more

For what is the “.well-known”-folder?

That /.well-known/ subdirectory is defined by RFC 5785 RFC 8615 It is increasingly common for Web-based protocols to require the discovery of policy or other information about a host (“site-wide metadata”) before making a request. For example, the Robots Exclusion Protocol http://www.robotstxt.org/ specifies a way for automated processes to obtain permission to access resources; likewise, … Read more

What’s the point in having “www” in a URL?

One of the reasons why you need www or some other subdomain has to do with a quirk of DNS and the CNAME record. Suppose for the purposes of this example that you are running a big site and contract out hosting to a CDN (Content Distribution Network) such as Akamai. What you typically do … Read more

why is $_REQUESt[‘redirect_to’] empty?

The redirect_to variable works fine, even as a GET variable, however wp-login.php also uses wp_safe_redirect() for doing the actual redirection, which means that the URL must be on the same website. You can’t redirect to anywhere in the web, just to the same site as the login is located on. This is to prevent some … Read more

Several times request to load plugins when sending one request

That might well be, but that’s alright. There might be redirects happening, and those will result in multiple requests. The WordPress-Cron System relies on AJAX-requests, those will also show up in the log. If you load any resources (images, scripts, stylesheets) that do not exist, WordPress will be loaded and handle the 404, resulting in … Read more

How to get value of custom http header?

I checked amazon.com website for retrive X-Amz-Cf-Id header which I belive is not a standard header and for me it is working fine: function wpse_288865_featch_header() { $response = wp_remote_get(‘https://www.amazon.com/’); $custom_header = wp_remote_retrieve_header($response, ‘X-Amz-Cf-Id’); var_dump($custom_header); exit; } add_action(‘init’, ‘wpse_288865_featch_header’); Sometimes amazon.com is not returning this header so please refresh your WordPress site couple of times. I … Read more