Enforce HTTPS in .htaccess

5 years ago · 05778a3cae
parent dc289877f1
commit 05778a3cae
1 changed files with 6 additions and 1 deletions
--- a/public/.htaccess
+++ b/public/.htaccess
@ -21,7 +21,12 @@ RewriteEngine on
 #
 RewriteBase /

-# Rewrite OpenID clients to YADIS file
+# enforce HTTPS
+RewriteCond %{HTTPS} !=on
+RewriteCond %{ENV:HTTPS} !=on
+RewriteRule .* https://%{SERVER_NAME}%{REQUEST_URI} [R=301,L]
+
+# rewrite OpenID clients to YADIS file
 RewriteCond %{HTTP_ACCEPT} ^application/xrds\+xml [NC]
 RewriteRule ^$ /yadis.xml [PT]