NO SSL Flash Upload wordpress plugin resources analysis
| Download This Plugin | |
| Download Elegant Themes | |
| Name | NO SSL Flash Upload |
| Version | 1.0.8 |
| Author | Aaron A. Kelley |
| Rating | 0 |
| Last updated | 2012-05-01 07:57:00 |
| Downloads |
2230
|
| Download Plugins Speed Test plugin for Wordpress | |
Home page
Delta: 0%
Post page
Delta: 0%
Home page PageSpeed score has been degraded by 0%, while Post page PageSpeed score has been degraded by 0%
NO SSL Flash Upload plugin added 13 bytes of resources to the Home page and 39 bytes of resources to the sample Post page.
NO SSL Flash Upload plugin added 0 new host(s) to the Home page and 0 new host(s) to the sample Post page.
Great! NO SSL Flash Upload plugin ads no tables to your Wordpress blog database.Note: WordPress 3.3 offers a new, non-Flash uploader; this plugin may break it.
If you are using SSL (https) to secure your WordPress admin sessions and you have an SSL certificate that is not trusted by default (because it is self- signed, signed by an untrusted certificate authority, signed for a different domain name, etc.), then you probably have problems using the Flash uploader.
This plugin disables SSL usage by the Flash uploader. This allows you to use the Flash uploader when you have FORCE_SSL_ADMIN enabled, with an untrusted SSL certificate. This works around the vague "IO Error" you get from the Flash uploader in such a situation.
Note that this plugin comes with the following security implications:
- Flash uploads no longer use SSL, thus, your uploaded files aren't encrypted during transmission.
- Uploading files with the Flash uploader will transmit your WordPress authentication cookie in plain text.
- If someone captures your login cookie (which is transmitted any time you load a page on your WordPress site while logged in, whether you are using SSL or not), they may be able to use it to upload files, view information about uploaded files, or change information about uploaded files.
If the benefit of having the Flash uploader available outweighs these potential security risks for you, then you can use this plugin to enable the Flash uploader.
Note that this plugin override's WordPress's auth_redirect and wp_validate_auth_cookie functions, and may not work if you are using other plugins that override these functions.
