http to https

[Anon]

I want a code snippet that will check whether the browser is using https as the url. If they are not then to redirect to https.

ie. the code will make sure the page is being loaded under SSL and if not then it will load under SSL - any ideas?

Michael

[robertjackson]

Michael,

Try something like:

if($HTTPS != 'on') {
header("Location: https://".$HTTP_HOST."/".$REQUEST_URI);
}

To help yourself out, try running a page with phpinfo(); while using ssl and while not. You'll see $HTTPS shows up in the Apache environment variables.

Of course, you could hard code the url, but I prefer not to because it simplifies my offline development (but that's a different story).

You probably have to play with the header string. You might also have to check the value of $QUERY_STRING and include that if necessary (i.e.
header("Location: https://".$HTTP_HOST."/".$REQUEST_URI.($QUERY_STRING?'?'.$QUERY_STRING:''));
)

Hope that helps.

Rob

[Anon]

Thanks Rob,

I knew it would be something simple - but i didn't know there was a $HTTPS environment variable.

if($HTTPS != 'on') {
header("Location: https://".$HTTP_HOST."/".$REQUEST_URI);
}

works like a dream. Now my page always loads in SSL. Fantastic.

Thanks again.
Michael