My Blog

php force redirect from http to https

Posted by chris on May 14th, 2007 in Programming

Here is a quick php script that will force any http connections to https. This assumes that SSL is working properly on your server.

if ($_SERVER['SERVER_PORT']!=443) 
{
	$url = "https://". $_SERVER['SERVER_NAME'] . ":443".$_SERVER['REQUEST_URI'];
	header("Location: $url");
}

Related posts:

1. php/linux – performing an http post the easy way
2. setting up ssl for apache2 on debian linux

Tags: header, redirect

This entry was posted on Monday, May 14th, 2007 at 3:26 am and is filed under Programming. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

3 Responses to “php force redirect from http to https”

1. Nathan Wallwork says:

   January 28, 2008 at 7:36 pm

   Should also call exit, or the rest of the script will still run,and may leak information over http.
2. phpnoob says:

   February 1, 2008 at 1:53 am

   how do you force https://www. ???

   One of my sites only allows for the http://www.domain.com to access ssl, so any other format ends with an error.

   domain.com -> bad
   http://domain.com -> bad
   http://www.domain.com -> good
3. admin says:

   February 19, 2008 at 5:17 am

   Nathan – thanks. I had no idea that the rest of the script would continue to run.

   phpboon – I think you would just add in the www right before calling the global variable $_SERVER['SERVER_NAME']