Comments on: Force Secure (SSL) Pages With .htaccess http://davidwalsh.name/force-secure-ssl-htaccess Legendary scribbles about JavaScript, HTML5, AJAX, PHP, CSS, and ∞. Tue, 22 May 2012 16:21:46 +0000 hourly 1 http://wordpress.org/?v=3.3.2 By: Danielhttp://davidwalsh.name/force-secure-ssl-htaccess#comment-31127 Daniel Tue, 20 Mar 2012 00:41:16 +0000 http://davidwalsh.name/?p=248#comment-31127 Thank you, this came in handy today. Thank you, this came in handy today.

]]> By: needhelphttp://davidwalsh.name/force-secure-ssl-htaccess#comment-28526 needhelp Thu, 12 Jan 2012 19:12:41 +0000 http://davidwalsh.name/?p=248#comment-28526 hello, i have several page, for example, domain/mypage1 and domain/mypage2 how do i configure htaccess so when i come to domain/mypage2 i will redirect to https connection,yes i have working well installed working well comodo SSL and had dedicated IP. hello,
i have several page, for example, domain/mypage1 and domain/mypage2
how do i configure htaccess so when i come to domain/mypage2 i will redirect to https connection,

yes i have working well installed working well comodo SSL and had dedicated IP.

]]> By: Frankhttp://davidwalsh.name/force-secure-ssl-htaccess#comment-26833 Frank Tue, 06 Sep 2011 14:08:19 +0000 http://davidwalsh.name/?p=248#comment-26833 I find SSL completely unconfigurable on Apache. What one would call SSL hell ! I find SSL completely unconfigurable on Apache. What one would call SSL hell !

]]> By: Georgehttp://davidwalsh.name/force-secure-ssl-htaccess#comment-26711 George Thu, 25 Aug 2011 15:06:11 +0000 http://davidwalsh.name/?p=248#comment-26711 Is there a way to exclude ONE page from the global https? If there is one page that I want to keep http, how would I go about doing that?Thanks for this tip! Is there a way to exclude ONE page from the global https? If there is one page that I want to keep http, how would I go about doing that?

Thanks for this tip!

]]> By: Eve Online Shipshttp://davidwalsh.name/force-secure-ssl-htaccess#comment-25463 Eve Online Ships Sat, 02 Jul 2011 10:54:21 +0000 http://davidwalsh.name/?p=248#comment-25463 When you force an SSL page for your website you also want to be sure and have any adds that are directed to your site to already include the https:// in the link to your site. Many search engine advertising sites are touchy with redirection even if it is only to send you to a secure page directly. This .htaccess code I believe will work on subdomains (remember you require a certificate for each subdomain from your web host service installed first), but you need to put the .htaccess code in each of your subdomains main folder. Thanks for the great article! =) When you force an SSL page for your website you also want to be sure and have any adds that are directed to your site to already include the https:// in the link to your site. Many search engine advertising sites are touchy with redirection even if it is only to send you to a secure page directly. This .htaccess code I believe will work on subdomains (remember you require a certificate for each subdomain from your web host service installed first), but you need to put the .htaccess code in each of your subdomains main folder. Thanks for the great article! =)

]]> By: Chrishttp://davidwalsh.name/force-secure-ssl-htaccess#comment-12174 Chris Fri, 25 Sep 2009 15:25:25 +0000 http://davidwalsh.name/?p=248#comment-12174 Will this script work with subdomains and wildcard SSL certificates?yourwebsite.com subdomain1.yourwebsite.com subdomain2.yourwebsite.com Will this script work with subdomains and wildcard SSL certificates?

yourwebsite.com
subdomain1.yourwebsite.com
subdomain2.yourwebsite.com

]]> By: Wernerhttp://davidwalsh.name/force-secure-ssl-htaccess#comment-9916 Werner Thu, 18 Jun 2009 09:48:31 +0000 http://davidwalsh.name/?p=248#comment-9916 @martinFor redirecting <em>all</em> non-SSL trafic, see http://blackflag.wordpress.com/2006/06/13/apache2-forcing-all-inbound-traffic-to-ssl/ @martin

For redirecting all non-SSL trafic, see http://blackflag.wordpress.com/2006/06/13/apache2-forcing-all-inbound-traffic-to-ssl/

]]> By: Salsan Josehttp://davidwalsh.name/force-secure-ssl-htaccess#comment-7895 Salsan Jose Mon, 23 Feb 2009 19:59:05 +0000 http://davidwalsh.name/?p=248#comment-7895 Thanks a lot.. I was searching this kind of thing.... Thanks a lot..
I was searching this kind of thing….

]]> By: Jonhttp://davidwalsh.name/force-secure-ssl-htaccess#comment-2677 Jon Mon, 11 Aug 2008 20:12:56 +0000 http://davidwalsh.name/?p=248#comment-2677 Thanks for the venue. I'm new to this web admin topic and would like some clarity on what is probably a very simple question for experienced webmasters.is it correct that using basic authentication (.htaccess + htpassword) on an Apache server that allows only ssl will not result in clear text being sent from the browser to the server .. since after all it is an ssl connection?Also, in general, is htaccess a reasonable way to secure directories given a 100% ssl site?Thanks. Thanks for the venue.
I’m new to this web admin topic and would like some clarity on what is probably a very simple question for experienced webmasters.

is it correct that using basic authentication (.htaccess + htpassword) on an Apache server that allows only ssl will not result in clear text being sent from the browser to the server .. since after all it is an ssl connection?

Also, in general, is htaccess a reasonable way to secure directories given a 100% ssl site?

Thanks.

]]> By: Markhttp://davidwalsh.name/force-secure-ssl-htaccess#comment-1077 Mark Fri, 09 May 2008 19:15:47 +0000 http://davidwalsh.name/?p=248#comment-1077 If you have a website that uses the www. prefix (the standardized way for top level domains) add www. into the .htaccess code. Otherwise Google will penalize you for duplicate content (your entire site would be one whole duplicate).Great tip! If you have a website that uses the www. prefix (the standardized way for top level domains) add www. into the .htaccess code. Otherwise Google will penalize you for duplicate content (your entire site would be one whole duplicate).

Great tip!

]]>