Wordpress security update 4.4.1

[Lynngre]

https://wordpress.org/news/2016/01/wordpress-4-4-1-security-and-maintenance-release/

• [x] Akvodev.org
• [x] Akvo.org
• [x] Peak
• [x] AkvoSites Test
• [x] AkvoSites new
• [x] AkvoSites old

[Lynngre]

Wordpress 4.4.+ has changed how it deals with responsive images. Note for future SSL rollout on WP sites.

A responsive attribute srcset ignores ssl/https urls & sets image urls to http. These images cannot be loaded .

Temporary fix (no WP fix as yet) for functions.php of theme:

/*

• Force URLs in srcset attributes into HTTPS scheme.

• This is particularly useful when you're running a Flexible SSL frontend like Cloudflare */ function ssl_srcset( $sources ) { foreach ( $sources as &$source ) { $source['url'] = set_url_scheme( $source['url'], 'https' ); }

  return $sources; } add_filter( 'wp_calculate_image_srcset', 'ssl_srcset' );

Notes: https://tech.enekochan.com/en/2016/01/15/use-https-protocol-in-wordpress-44-for-srcset-attribute/

https://core.trac.wordpress.org/ticket/25449

[Lynngre]

Akvo Sites Old has been upgraded to Wordpress 4.4.2 with compatible plugins upgraded too.