Force SSL using .htaccess and mod_rewrite

Michael Ryvkin — Sat, 21 Nov 2009 23:42:46 +0000

Sometimes you need to force your visitors to use secure connection if they forgot to type https:// in the browser. It can be accomplished by adding the following lines to .htaccess file located in the root folder of your web site. It will force secure connection for all pages on your web site.

.htaccess

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

If you want to force secure connection only in certain directory (for example /secure), use this code instead.

.htaccess

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteCond %{REQUEST_URI} ^secure
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

Blog - PonticStar.com » Apache

Force SSL using .htaccess and mod_rewrite