PHP https网址转发

Question

Ok so I need my site to automatticly forward all requests to the server for http to https. I was using php with no real problems but now godaddy is telling me that I need to change the way i am doing this. Is my code correct, should i change how im doing this, what method is better? Thanks in advance for the help!

<?php
if ($_SERVER['SERVER_PORT']!=443)
{
$url = "https://". $_SERVER['SERVER_NAME'] . ":443".$_SERVER['REQUEST_URI'];
header("Location: $url");
}
?>

Answer 1

You don't need to include the port number... https' default port is 443 already. You'd only need an explicit port number if you're running an https service on some OTHER port. As well, why the duplicate redirect? You've got 2 if() blocks doing the exact same thing.

However, just testing for port 443 is not sufficient. You can run ANY service you want on any port. It's just that HTTPS usually is on 443. But nothing says it HAS to be. There's $_SERVER['HTTPS'] which explicity tells if you if HTTPS is in use or not.

Answer 2

A better method would be to use .htaccess and mod_rewrite to do the redirect.

RewriteEngine On 
RewriteCond %{SERVER_PORT} 80 
RewriteRule ^(.*)$ https://www.example.com/$1 [R,L]

This is explained in more detail here .

Answer 3

I would use something as described here:

enter link description here

I would not like to rely for port 443. Someone can configure normal traffic towards 443 or use another port for https (both rare).

Additionally since it is the default, you can ommit the ":443"...

Answer 4

You could use htaccess for doing this:

RewriteEngine On
RewriteCond %{SERVER_PORT} !443
RewriteRule (.*) https://www.example.com/require-secure/ [R]

Hope it helps

Answer 5

I am using this code in my .htaccess file which works great:

RewriteEngine On 
RewriteCond %{SERVER_PORT} 80 
RewriteRule ^(.*)$ https://example.ch/$1 [R,L]