Insecure website warning

[webuser]

How do we secure our site? I’m getting a warning message when I log into my new site/ blog.

Quote from Firefox

Start quote [ Starting in Firefox version 52, you will also see a warning message when you click inside the login box to enter a username or password.
What can I do if a login page is insecure?
If a login page for your favorite site is insecure, you can try and see if a secure version of the page exists by typing https:// before the url in the location bar. You can also try to contact the web administrator for the site and ask them to secure their connection.] End quote

[Infinity]

What is your website?

If you use http://YOURSITE.COM then you can only use HTTP not HTTPS so within your script settings for example WordPress make sure your site begin HTTP

[webuser]

Thx for the quick response. I’m in the Wordpress Settings/ general area now.
The WordPress Address (URL) and Site Address (URL) are both the same
http://mysite.com
It appears to be the default setting.
Do I change it to https://www.mysite.com

[webuser]

I can’t log into the blog any more. Firefox has blocked it as an “insecure site”.

“The owner of this site has configured their website improperly. To protect your information from being stolen, Firefox has not connected to this website.”

Firefox advanced says:
Site uses an invalid security certificate. The certificate is only valid for the following names: *.000webhostapp.com, 000webhostapp.com Error code: SSL_ERROR_BAD_CERT_DOMAIN

[akhilkumar332]

@webuser What is your domain name??

[webuser]

Thx again.
Have deleted Wordpress and all dbs , reinstalled a couple of times, and the problem persists.
Have checked the nameservers are set correctly .
Url

Power of Mind

[akhilkumar332]

The reason is because you are not using “https” or simply “not using ssl”.
So ignore this issue or you can use some plugin…so that you can use admin over “https” and remaining page over “http”

[akhilkumar332]

You can check this tutorial…See if this helps you…

Solving WordPress HTTPS/HTTP error on custom domains

So you've installed WordPress on your http://yoursite.000webhostapp.com but when visitors are loading http://yoursite.com it still takes them to http://yoursite.000webhostapp.com? This will most probably be because you installed WordPress with 000webhostapp in the configuration, easily modify this in your wp-admin once logged in select general then change both URL boxes to http://yoursite.com - do not use HTTPS this will cause issues. [image] So now I've changed the URL to my personal site…

[webuser]

Thx. The only option when installing wordpress on 000webhost was to enter the domain name. No option to add https or http.
I’ll check the tutorial. Thx again

[webuser]

The tutorial suggested installing a wordpress plugin (wordpress force http) to over-ride the “insecure site” warning.
If problem persists, then ignore the warning if just logging in as the admin. As the site is secure for visitors. Thx again

Full article here

Solving WordPress HTTPS/HTTP error on custom domains

So you've installed WordPress on your http://yoursite.000webhostapp.com but when visitors are loading http://yoursite.com it still takes them to http://yoursite.000webhostapp.com? This will most probably be because you installed WordPress with 000webhostapp in the configuration, easily modify this in your wp-admin once logged in select general then change both URL boxes to http://yoursite.com - do not use HTTPS this will cause issues. [image] So now I've changed the URL to my personal site…

[brianbrotherbob]

I get the same error with either http:// or https:// it keeps seeing the SSL as belonging to OOOwebhost. My domain name is delamrcrp.com

Brian

[akhilkumar332]

That’s because you don’t have SSL.
Try this tutorial,

How To Use Cloudflare For SSL

By default, 000webhost provides a secure connection for all 000webhostapp.com subdomains. However, for custom domains, this is not the case. But with this method, you can setup your custom domain with a secure HTTPS connection for free. First, sign up for an account at 000webhost.com if you don’t already have one. [download77] Then, create a site, picking a name and a password. [2] Now, create a Cloudflare account at https://dash.cloudflare.com/sign-up [3] Next, click the blue button that…

[ediale]

Hi
I have the same problem. My website is
Https://dhitsmayalab.000webhostapp.com. and on some universities like stanford cant access my site because of their security restrictions on some sites.

It throws this error :the connection is not secure.The certificate is not valid.

They dont want to add an exception and I try to find a global solution.

So myt question is if i buy a domain and create my own link like wwwxxxxcom

It will not use sdl certificate? And if this is the case it will be a free web with no security restrictions for the universities?

I will be grateful if you help me.

Many thanks edith

[Ayu]

Hi i think so that many universities only allow access to sites with SSL so i recommend you to grab any free or paid domain and use SSL with it

[ediale]

If they only allow sites with ssl why 000webhostapp ssl certificate is not allow in this case?

[teodor]

Conversation switched to PM