How to Fix Mixed Content Issues in WordPress

A mixed content issue occurs when both secure (HTTPS) and insecure (HTTP) content are loaded on the same page. This can cause browser warnings, impact SEO, and compromise security. This guide covers how to identify and resolve mixed content issues on your WordPress site.

Step 1: Verify Your Site’s SSL Certificate

Ensure your SSL certificate is properly installed to secure all pages.

1. Check SSL Certificate Status

   • Visit your site using https://yourdomain.com and look for a secure padlock icon in the browser’s address bar.
   • If the padlock is missing, the SSL certificate may need to be reinstalled or assigned to the domain in the Shared Hosting Control Panel.

2. Request an SSL Certificate and Enable HTTPS in the Shared Hosting Control Panel

   • Log into the Shared Hosting Control Panel, select your website, and go to the Security tab.
   • Here, you can request a free Let’s Encrypt SSL certificate and enable Force HTTPS to automatically redirect all traffic to HTTPS.

Step 2: Update WordPress URLs to HTTPS

Ensure that WordPress is configured to use HTTPS for your site URL and home URL.

1. Go to Settings > General

   • In the WordPress Dashboard, navigate to Settings > General.

2. Update URLs

   • Update both WordPress Address (URL) and Site Address (URL) to use https://yourdomain.com.
   • Click Save Changes to apply the settings.

Step 3: Use a Plugin to Force HTTPS

A plugin can help enforce HTTPS and automatically rewrite HTTP URLs to HTTPS.

1. Install Really Simple SSL

   • Go to Plugins > Add New in your WordPress Dashboard.
   • Search for Really Simple SSL, install, and activate the plugin.

2. Enable SSL

   • Really Simple SSL will prompt you to enable SSL. Click Activate SSL to rewrite all HTTP URLs to HTTPS automatically.

Note: Really Simple SSL is a convenient option, but it’s recommended to manually update any hardcoded HTTP URLs if possible.

Step 4: Find and Replace HTTP URLs in Content

Manually changing HTTP links to HTTPS in your content and settings can resolve remaining mixed content warnings.

1. Use Better Search Replace Plugin

   • Install and activate the Better Search Replace plugin from Plugins > Add New.
   • Go to Tools > Better Search Replace.

2. Search and Replace HTTP URLs

   • In the plugin settings, search for http://yourdomain.com and replace it with https://yourdomain.com.
   • Select all database tables for a thorough search, and click Run Search/Replace to update links.

Important: Back up your database before using this plugin, as it modifies content site-wide.

Step 5: Update Theme and Plugin URLs

Occasionally, themes or plugins contain hardcoded HTTP URLs.

1. Manually Edit Theme Files

   • Go to Appearance > Theme Editor and review any custom code for HTTP links. Update any HTTP links to HTTPS.

2. Check Plugin Settings

   • Certain plugins (e.g., image or URL plugins) may include specific URLs in their settings. Go through plugin settings to replace any hardcoded HTTP URLs.

Step 6: Clear Caches

Caching can store outdated HTTP links, so clearing all caches may resolve remaining mixed content issues.

1. Clear Cache in WordPress

   • If you’re using a caching plugin, go to the plugin settings and clear the cache.

2. Clear Browser Cache

   • Refresh your browser cache by pressing Ctrl+F5 (Windows) or Cmd+Shift+R (Mac).

Step 7: Test for Mixed Content

After following the steps, use a tool to verify if all resources are loading over HTTPS.

1. Use a Mixed Content Checker
   • Tools like Why No Padlock? or your browser’s Inspect Element tool can identify specific insecure links.
   • Address any remaining HTTP links if detected.

Additional Tips

• Update All Links to HTTPS: Manually updating all links and resources is the best way to avoid mixed content issues.
• Enforce HTTPS at Server Level: If you’re comfortable with advanced settings, consider enforcing HTTPS in the .htaccess file with a redirect rule.

By following these steps, you can resolve mixed content issues, eliminate browser warnings, and improve your site’s security and SEO. For additional assistance, feel free to reach out to our support team.