7/17/2014 - 8:45 AM

Using .htaccess to Move Your Site to SSL

Using .htaccess to Move Your Site to SSL

# Moving your whole site to SSL

# First rewrite to HTTPS:
# Don't put www. here. If it is already there it will be included, if not
# the subsequent rule will catch it.
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
# Now, rewrite any request to the wrong domain to use www.
RewriteCond %{HTTP_HOST} !^www\.
RewriteRule ^(.*)$ https://www.%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

# Excluding some pages from SSL

# Exceptions for HTTPS
RewriteCond %{HTTPS} off
RewriteCond %{QUERY_STRING} !^option=com_obrss&task=feed&id=1

# UPDATE 2020: 
RewriteEngine on
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

# or

RewriteEngine on
RewriteBase /
RewriteCond %{HTTPS} !on
RewriteRule (.*){REQUEST_URI} [L,R=301]