---
title: "WordPress Security: Fix Upload Issues with WordPress Force SSL Admin"
description: If you're having issues uploading files to your website while using WordPress force SSL admin, this guide will help fix your htaccess/OpenSSL problem.
image: http://marketing.digital1ne.com/hubfs/loadissuesSSL.jpg
---
[](http://www.digital1ne.com/)
- [Home](http://www.digital1ne.com/)
- [Inbound Marketing](http://www.digital1ne.com/inbound-marketing/)
- [Inbound Marketing](http://www.digital1ne.com/inbound-marketing/)
- [Inbound Marketing Pricing](http://www.digital1ne.com/services-pricing/)
- [Web Design](http://www.digital1ne.com/minneapolis-web-design/)
- [Blog](http://blog.digital1ne.com/)
- [About Us](http://www.digital1ne.com/about-us/)
- [Contact](http://www.digital1ne.com/contact/)
-
-
-
-
-
-
-
-
[](http://www.digital1ne.com/)
- [Home](http://www.digital1ne.com/)
- [Inbound Marketing](http://www.digital1ne.com/inbound-marketing/)
- [Inbound Marketing](http://www.digital1ne.com/inbound-marketing/)
- [Inbound Marketing Pricing](http://www.digital1ne.com/services-pricing/)
- [Web Design](http://www.digital1ne.com/minneapolis-web-design/)
- [Blog](http://blog.digital1ne.com/)
- [About Us](http://www.digital1ne.com/about-us/)
- [Contact](http://www.digital1ne.com/contact/)
# WordPress Security: Fix Upload Issues with WordPress Force SSL Admin
- [Home](http://www.thelistinc.com)
May 26, 2016 [Leave a comment](https://blog.digital1agency.com/wordpress-security-fix-upload-issues-with-wordpress-force-ssl-admin#comments-listing) [Linux](https://blog.digital1agency.com/topic/linux), [Firewall](https://blog.digital1agency.com/topic/firewall), [https](https://blog.digital1agency.com/topic/https), [SSL](https://blog.digital1agency.com/topic/ssl), [WordPress Security](https://blog.digital1agency.com/topic/wordpress-security), [htaccess](https://blog.digital1agency.com/topic/htaccess) [Steven Milne](https://blog.digital1agency.com/author/steven-milne)
[SEO tips and tricks: How to Optimize pages for Social Media with Yoast](https://blog.digital1agency.com/seo-tips-and-tricks-how-to-optimize-pages-for-social-media-with-yoast)
[WordPress Security: Use Chrome to ID non-secure elements on your pages](https://blog.digital1agency.com/wordpress-security-use-chrome-to-id-non-secure-elements-on-your-pages)
---
## **USING WORDPRESS on Linux with Apache + mod\_SSL:**
If you're reading this article I'm going to assume that you're operating a WordPress website on a Linux server with Apache running the module mod\_ssl. It's a pretty common setup these days and at times can be downright frustrating, especially when trying to maintain at least some [WordPress Security](http://www.digital1ne.com/wordpress-security/) standards. Support for this setup is becomming more common amongst hosting providers but it's not always an option to lean of them. Have no fear, I'm here to solve a common upload issue with 'FORCE\_SSL\_ADMIN' on WordPress sites with this configuration.
**Need other help with WordPress Security?** Check out some of these other articles on [our blog](http://blog.digital1ne.com):
- [5 Reasons to use WordPress in your next Redesign](https://blog.digital1agency.com/5-reasons-to-use-wordpress-in-your-next-redesign)
Also, check out our 'WordPress Security Checklist' for more help securing your site!
[](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/2076526/042637d0-2848-4298-9d7c-d1d9ad7e99a4)
---
## THINGS YOU'LL NEED IN THIS TUTORIAL:
1. [FTP](https://filezilla-project.org/) access to your website files - we'll need to get at your website's .htaccess file during this process.
2. Access to your WordPress admin (and administrator privelages to access the full "Settings" tab).
3. A website running on a server with Apache. (Windows or Linux, Apache is for both. This pertains to the .htaccess file we'll modify.)
**THE ROOT OF THE PROBLEM (or for you Don Henley fans ["The Heart of the Matter"](https://vimeo.com/90740115)):**
If you've secured your WordPress admin page pages and are having trouble uploading larger files you're not alone. If you've done a little research you may have already come accross solutions ranging from problems with SSL, server access issues, or general firewall issues. Maybe one of these solutions even fixed your problem, maybe not. If none of them fixed your upload issue I'd be willing to bet you the problem with WordPress force ssl admin running on Apache + mod\_ssl.
The problem is actually due to something called the SSL renegotiation buffer size - or the '[SSLRenegBufferSize](https://httpd.apache.org/docs/trunk/mod/mod_ssl.html#sslrenegbuffersize)' directive in Apache mod\_ssl. In a standard install of Apache on Linux, this directive is often undefined in the Apache config which then causes the server to use the default value of 'SSLRenegBufferSize 131072'. That's only 131072 bytes (.125 MB's!, super small) and if you're running an older version of Apache it could be even less than that. If your admin pages are running on https (over SSL) then that's going to be a problem when attempting to upload files larger than the smallest image files using this module thus, our problem. Here's how to fix it:
## Step 1: Backup your website!
Every. Single. Time. People. Whenever making modifications to the configuration of your website, back it up. Back up the website files and directories as well as your WordPress database. It sounds simple but it's easy to forget. Just do it.
## Step 2: download your htaccess file
# BEGIN WordPress
RewriteEngine On
RewriteCond %{SERVER\_PORT} !^443$
RewriteRule (.\*) https://%{HTTP\_HOST}%{REQUEST\_URI} \[R,L\]
RewriteBase /
RewriteRule ^index\\.php$ - \[L\]
RewriteCond %{REQUEST\_FILENAME} !-f
RewriteCond %{REQUEST\_FILENAME} !-d
RewriteRule . /index.php \[L\]
# END WordPress
## Step 3: add new rule to your htaccess
SSLRenegBufferSize 10486000
In my example I chose the buffer size of 10486000 bytes, but honestly this is up to you. There may be other security reasons to keep it smaller, but at this size you should not have any problems uploading any elements that you would normally need on a WordPress website.
## Step 4: save and upload
Save an upload your final .htaccess file. Make sure you overwrite your old file and make a copy before you do, just in case something goes wrong. Your final file should look something like this:
# BEGIN WordPress
RewriteEngine On
RewriteCond %{SERVER\_PORT} !^443$
RewriteRule (.\*) https://%{HTTP\_HOST}%{REQUEST\_URI} \[R,L\]
RewriteBase /
RewriteRule ^index\\.php$ - \[L\]
RewriteCond %{REQUEST\_FILENAME} !-f
RewriteCond %{REQUEST\_FILENAME} !-d
RewriteRule . /index.php \[L\]
SSLRenegBufferSize 10486000
# END WordPress
## Step 5: test uploads, both big and small
Now it's time to test big and small uploads and repeatedly do so. Since this is a renegotiation with the server you'll want to upload something, wait a minute, and try again. Upload the biggest file you'll possibly ever be uploading to your WordPress site and see if it successfully transfers. If you're good at math, you can actually find out how many MB's 10486000 bytes is and that should help you out (psst, it's 10MB!). We figure there really is never going to be a situation where you'd use the WP interface to upload anything larger so that's our cap, but it's up to you!
WordPress force ssl admin is a great tool that will secure your login page and admin dashboard, but it can be a bit frustrating. Hopefully this guide helped you remove one annoying problem.
---
**THANKS FOR READING THIS POST ON WORDPRESS SECURITY:**
Thanks for visiting our blog and reading this installment in our WordPress Security series! We hope that it helps you get your site running at peak performance with a greater level of security. If you're looking for more great WordPress security pointers check out our [full blog](http://blog.digital1ne.com/) or subscribe in the footer at the bottom of this page. Also be sure to download our "WordPress Security Checklist" and find out what you need to be doing to keep your WordPress site safte. Click the link below to download!
[](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/2076526/042637d0-2848-4298-9d7c-d1d9ad7e99a4)
---
Share this post
- [Tweet](https://twitter.com/share)
### About the author
### [Steven Milne](https://blog.digital1agency.com/author/steven-milne)
I'm Steve and I'm a co-founder and CFO at Digital 1. I am responsible for helping companies grow through lead generation anchored by Inbound Marketing. I also have a background in digital and cyber security. I very much enjoy writing and blogging at Digital 1. I love helping companies realize their website's potential. It's always so satisfying to see their online presence expand and generate business essential to growth.
### Subscribe to our blog!
[](http://www.digital1ne.com/)
Helping you grow and protect your business through inbound marketing and WordPress security.
**EMAIL:** [info@digital1ne.com](mailto:info@digital1ne.com?Subject=Website%20Inquiry)
**PHONE:** 612.547.8261
**ADDRESS:** 2929 4th Ave S
Minneapolis, MN 55408
### NAVIGATION
- [About Us](http://www.digital1ne.com/about-us/)
- [Resources](http://www.digital1ne.com/resources/)
- [Services & Pricing](http://www.digital1ne.com/services-pricing/)
- [Contact](http://www.digital1ne.com/contact/)
- [Blog](http://blog.digital1ne.com)
- [Privacy Policy](http://www.digital1ne.com/privacy-policy/)
### Subscribe to our Blog!
### FROM OUR TWITTER FEED
[Tweets by @digital1ne](https://twitter.com/digital1ne)
[](http://www.digital1ne.com/)© Copyright 2016 Digital 1
Digital 1 - Digital Inbound Marketing. Digital Security