I'm having problems on a website after adding an SSL certificate. These are the WhyNoPadlock results:

What I’ve done so far:

1. Changed all to HTTPS in WP settings
2. Used Better Search Replace to replace all instances of HTTP with HTTPS.

This hasn't fixed things and any advice on how else to resolve these hard and soft failures very appreciated.

Another problem is that since adding the SSL certificate, the slider which should appear on the home page has disappeared. It uses an old plugin called Cross Slide Cross Fade, which hasn’t been updated for a few years. I’m presuming this may also be a result of a mixed content error but any other thoughts on this also appreciated. I'm hoping it's simply a question of sorting out any http/https conflicts in it but also wonder if push comes to shove if it would be better to uninstall it and try using a more modern slider plugin?

Many thanks

I'm having problems on a website after adding an SSL certificate. These are the WhyNoPadlock results: https://www.whynopadlock/results/7193cea2-78e7-4bc7-9581-2af7f90bd15d

What I’ve done so far:

1. Changed all to HTTPS in WP settings
2. Used Better Search Replace to replace all instances of HTTP with HTTPS.

This hasn't fixed things and any advice on how else to resolve these hard and soft failures very appreciated.

Another problem is that since adding the SSL certificate, the slider which should appear on the home page has disappeared. It uses an old plugin called Cross Slide Cross Fade, which hasn’t been updated for a few years. I’m presuming this may also be a result of a mixed content error but any other thoughts on this also appreciated. I'm hoping it's simply a question of sorting out any http/https conflicts in it but also wonder if push comes to shove if it would be better to uninstall it and try using a more modern slider plugin?

Many thanks

• plugins
• jquery
• ssl

• 1 Did you go through your theme and plugins for hardcoded URLs? You tried to change everything in the database but didn't change any of the files. Also, using the jQuery from the CDN isn't great and it's using an insecure URL, don't deregister/re-register jQuery – Tom J Nowell ♦ Commented Jun 17, 2020 at 11:28
• It looks like the stray jQuery is from the cross-slider plugin, yes, and it won't work with WordPress's included jQuery because it's trying to use $() not jQuery(). The plugin changelog says it should be fixed in version 1.6 - can you get hold of a later version? There's a version 2.0.5 in Subversion if you can get it from there. Alternatively you can probably just edit the http:// to https:// in the plugin, or change the two $( to jQuery( and it should work again. – Rup Commented Jun 17, 2020 at 11:33
• Thank you both. Must admit I'm more of frontend designer with knowledge of HTML and CSS and jQuery is somewhat beyond me! I think in the log run it is going to be better to switch to a more up to date slideshow plugin. I would like to try and make a temporary fix if I can. Rup, I did a search for the version you mention in Subversion but couldn't find it - are you able to send a link to it please? I can see that I can edit the plugin code - you said there are two $( which I need to change to jQuery( - are they on particular lines of the code in the file jQuery.cross-slide.js? Many thanks – user152362 Commented Jun 17, 2020 at 12:14
• Tom, when you say go through the theme & plugins for hardcoded URLs, does that mean scan through the code & see if I can spot any random HTTP links & update them to HTTPS manually? I tried this with the soft failures re links to social media icons in footer document but got an error message within Wordpress: 'Unable to communicate back with site to check for fatal errors, so the PHP change was reverted. You will need to upload your PHP file change by some other means, such as using SFTP.' Is only way to update these URLs editing the file locally & uploading the new version via Filezilla? Steph – user152362 Commented Jun 17, 2020 at 12:17
• 1 Hi Tom - just to update as you'll see below - using Filezilla I made changes to the areas where hard and soft failures were showing up in WhyNoPadlock and this has now resolved the mixed content errors. Thanks again for your input. – user152362 Commented Jun 17, 2020 at 13:11

1 Answer 1

You have version 1.6.0 of the crossslide plugin. (I'd guessed 1.5.2 since the changelog said 1.6.0 fixed this, but it didn't.)

You can fix this by

1. unticking the 'Default jQuery' option in the plugin configuration, which removes the ajax.googleapis/ajax/libs/jquery/1.3.2/jquery.js include

2. replacing $( with jQuery( on lines 101 and 102, i.e. instead of

    $(function(){
        $('#crslideshow').crossSlide({
   

   you should have

   jQuery(function(){
       jQuery('#crslideshow').crossSlide({
   

   (This is because WordPress sets up jQuery in noConflict mode by default, where it does not define itself as $. Including the second jQuery script did set up $ with the old version.)

Here's a gist of roughly what you should be left with. (There is another set of $( to jQuery( changes on lines 120-133, but you don't need those for the mode you're running the plugin in.) It should now work again. The original CrossSlide author does recommend using something more modern, but it should continue to work fine.

You could also upgrade the plugin to 2.0+ which would already contain this fix; it's not available for download anymore, but the files are in subversion (see the 'Development' tab of the plugin page).