Forcing SSL and WWW using .htaccess

Question

I would like to know if this code in .htaccess for forcing SSL and WWW in URL is correct, because with another codes I usually get redirect loop, e.g. RewriteCond %{HTTPS} !=on and now it works like a charm (suspiciously). Also, is possible to write it better/simplier?

# Force to SSL
RewriteCond %{HTTP:HTTPS} !1
RewriteRule ^(.*)$ https://%{HTTP_HOST}/$1 [R=301,L]

# Force to WWW
RewriteCond %{HTTP_HOST} !^www\.(.*)$ [NC]
RewriteRule ^(.*)$ https://www.%{HTTP_HOST}/$1 [R=301,L]

Possible duplicate of Force SSL/https using .htaccess and mod_rewrite. You might also try Code Review Stack Exchange. — jww
– jww, Commented Jul 12, 2014 at 8:55
That is not what I specifically searching. I will try Code Review Stack Exchange, thank you. — user2406937
– user2406937, Commented Jul 12, 2014 at 9:08

Aley · Accepted Answer · 2016-05-02 15:50:01Z

66

That's a bit simpler.

RewriteEngine On
RewriteCond %{HTTPS} off [OR]
RewriteCond %{HTTP_HOST} !^www\.domain\.com$ [NC]
RewriteRule ^(.*)$ https://www.domain.com/$1 [L,R=301]

answered May 2, 2016 at 15:50

Aley

8,6607 gold badges46 silver badges59 bronze badges

Sign up to request clarification or add additional context in comments.

6 Comments

Sam Over a year ago

could you please explain the conditions as well? I am bit novice here.

Aley Over a year ago

Line 2 checks if HTTPS is off then we have an OR condition with line 3. Line 3 checks if hostname is different from www.domain.com. If one of them gives true, last line takes action and redirects "R=301" with HTTP Code 301 to domain.com

Sam Over a year ago

By this all the subdomains gets redirected as well. for eg. api.domain.com changes to www.domain.com.. is there any way to add www only to root domain.com and not any subdomain.

Ramesh-X Over a year ago

this will not redirect https://example.com to https://www.example.com

Bruno Simoes Over a year ago

dont think that works for subfolders if you have another .htaccess on them

|

zx81 · Accepted Answer · 2014-07-12 09:27:36Z

37

Use this:

RewriteEngine on

# Force www: from http://stackoverflow.com/a/4958847/1078583
RewriteCond %{HTTP_HOST} !^$
RewriteCond %{HTTP_HOST} !^www\. [NC]
RewriteCond %{HTTPS}s ^on(s)|
RewriteRule ^ http%1://www.%{HTTP_HOST}%{REQUEST_URI} [R=301,L]

# Force SSL: From http://stackoverflow.com/q/24322035/
RewriteCond %{HTTPS} off
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [R=302,L,NE]

answered Jul 12, 2014 at 9:27

zx81

42k10 gold badges92 silver badges106 bronze badges

2 Comments

Jabari Over a year ago

Is there a reason for making the SSL redirect temporary instead of permanent?

zx81 Over a year ago

@Jabari Looks like I may have pasted these two pieces of code (see the URLs). But in general, 302s are recommended while testing, then when you're sure the redirect works, move to 301.

Jasper Mulder · Accepted Answer · 2022-03-22 15:43:42Z

14

I think this is a great snippet. Not necessary to type a domain. This is forcing WWW and HTTPS in any case. This is dealing with subfolders as well.

RewriteEngine On

RewriteCond %{HTTP_HOST} !^www\.
RewriteRule ^(.*)$ https://www.%{HTTP_HOST}/$1 [R=301,L]

RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]

edited Mar 22, 2022 at 15:43

answered May 15, 2019 at 11:56

Jasper Mulder

3032 silver badges10 bronze badges

2 Comments

warmwhisky Over a year ago

I think I prefer this one.

Callum Kerr Over a year ago

Works perfectly and reliably.

WebCraker · Accepted Answer · 2018-02-14 22:23:50Z

3

Sorry for bumping this topic but I just wanted to add a simple solution for search engine visitors.

RewriteEngine on
# Force WWW & SSL
RewriteCond %{HTTP_HOST} !^www\.(.*)$ [NC]
RewriteRule ^(.*)$ https://www.stackoverflow.com/$1 [L,R=301]

answered Feb 14, 2018 at 22:23

WebCraker

615 bronze badges

Comments

Community · Accepted Answer · 2020-06-20 09:12:55Z

1

9 Force www: is perfect thank you.

My server is Heart Internet and the force SSL for Heart is:

# All calls go to SSL
RewriteEngine On
RewriteCond %{ENV:HTTPS} !=on
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

edited Jun 20, 2020 at 9:12

CommunityBot

11 silver badge

answered Feb 21, 2017 at 9:54

Graphicz

635 bronze badges

Comments

404notBrighton · Accepted Answer · 2020-06-20 12:06:43Z

0

I had the same problem and I used this to solve it. worked best.

RewriteCond %{SERVER_PORT} 80 
RewriteRule ^(.*)$ https://www.example.com/$1 [R=301,L,NE]

answered Jun 20, 2020 at 12:06

404notBrighton

1801 gold badge3 silver badges11 bronze badges

Collectives™ on Stack Overflow

Forcing SSL and WWW using .htaccess

6 Answers 6

6 Comments

2 Comments

2 Comments

Comments

9 Force www: is perfect thank you.

Comments

Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

6 Answers 6

6 Comments

2 Comments

2 Comments

Comments

9 Force www: is perfect thank you.

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related