Automatically Redirecting Visitors to HTTPS
If you have a secure certificate (SSL) on your website, you can automatically redirect visitors to the secured (HTTPS) version of your website to make sure your communications are encrypted.
How you do that depends on what type of hosting account you have (more info).
Windows
If your account uses IIS 6, you’ll need to use a JavaScript redirect to direct visitors to the https version of your site.
If you use IIS 7 or 8, you’ll need to either create or modify your hosting account’s web.config
file. If you need to create one, see:
- Accessing Your Control Panel’s File Manager — Create a file named web.config.
- Use the example from How To Create the Web.config File for an ASP.NET Application.
In the web.config
file you create, you also need to add and
tags, as well as close them (
and
), in the
section.
To Automatically Redirect Visitors to HTTPS
- Using your hosting account’s editor, open your account’s
web.config
file. - In the
section, add the following code:
<rule name=”HTTP to HTTPS redirect” stopProcessing=”true”> <match url=”(.*)” /> <conditions> <add input=”{HTTPS}” pattern=”off” ignoreCase=”true” /> </conditions> <action type=”Redirect” redirectType=”Found” url=”https://{HTTP_HOST}/{R:1}” /> </rule> - Save your changes.
Linux
You’ll need to either create or modify your hosting account’s .htaccess
file. If you need to create one, you can use your control panel’s file manager (more info).
Add the following code to the .htaccess
file:
RewriteEngine On
RewriteCond %{SERVER_PORT} !=443
RewriteRule ^ https://[your domain name]%{REQUEST_URI} [R,L]
Where [your domain name]
is your website’s domain name.
You can also redirect specific folders off of your domain name by replacing the last line of the code above with:
Where [directory name]
is the directory you want to use.
Important: If you have existing code in your .htacess, add this above where there are already rules with a similar starting prefix.
*Information provided courtesy of GD Support*