.htaccess Forcing HTTPS and in some cases www. but excluding specific subdomains
Question
We are using cPanel for some websites and we use the following .htaccess rules and for the most part they work perfectly but they have a few issues...
# Force HTTPS & NON-WWW
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{HTTPS} off [OR]
RewriteCond %{HTTP_HOST} ^www\. [NC]
RewriteCond %{HTTP_HOST} ^(?:www\.)?(.+)$ [NC]
RewriteRule ^ https://%1%{REQUEST_URI} [L,NE,R=301]
</IfModule>
With the rule below, if we visit non-www links they correctly get switched to www. links which is good
# Force HTTPS & WWW
<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{HTTPS} off [OR]
RewriteCond %{HTTP_HOST} !^www\. [NC]
RewriteCond %{HTTP_HOST} ^(?:www\.)?(.+)$ [NC]
RewriteRule ^ https://www.%1%{REQUEST_URI} [L,NE,R=301]
</IfModule>
The problem with this Force HTTPS & WWW rule is when we come to subdomains...
- If we visit
staging.website.comit incorrectly gets rewritten towww.staging.website.com. Sure a condition likeRewriteCond %{HTTP_HOST} !^staging\\. [NC]RewriteCond %{HTTP_HOST} !^staging\\. [NC]could be used but that means every subdomain would need one setup. - Another issue with adding that condition is if we visit staging.website.com it won't be forced to use https...
- In a more complex setup we have a cPanel account where 3 websites are
https://and one ishttps://www.and for that particular cPanel account I don't know how I can modify these .htaccess rules to work for both scenarios...
#1 and #2 are most noticeable when it comes to ipv6.website.com
Rule Test for Forcing `httPs & WWW
https://website.com-->https://www.website.comhttp://website.com-->https://www.website.comhttps://www.website.com-->https://www.website.comhttp://www.website.com-->https://www.website.comhttps://ipv6.website.com-->https://ipv6.website.comhttp://ipv6.website.com-->https://ipv6.website.comhttps://www.ipv6.website.com-->https://ipv6.website.comhttp://www.ipv6.website.com-->https://ipv6.website.comhttps://randomsubdomain.website.com-->https://www.randomsubdomain.website.comhttp://randomsubdomain.website.com-->https://www.randomsubdomain.website.comhttps://www.randomsubdomain.website.com-->https://www.randomsubdomain.website.comhttp://www.randomsubdomain.website.com-->https://www.randomsubdomain.website.comhttps://ftp.website.com-->http://ftp.website.comhttp://ftp.website.com-->http://ftp.website.comhttps://www.ftp.website.com-->http://ftp.website.comhttp://www.ftp.website.com-->http://ftp.website.com
Rule Test for Forcing `httPs & Non-WWW
https://website.com-->https://website.comhttp://website.com-->https://website.comhttps://www.website.com-->https://website.comhttp://www.website.com-->https://website.comhttps://ipv6.website.com-->https://ipv6.website.comhttp://ipv6.website.com-->https://ipv6.website.comhttps://www.ipv6.website.com-->https://ipv6.website.comhttp://www.ipv6.website.com-->https://ipv6.website.comhttps://randomsubdomain.website.com-->https://randomsubdomain.website.comhttp://randomsubdomain.website.com-->https://randomsubdomain.website.comhttps://randomsubdomain.website.com-->https://www.randomsubdomain.website.comhttp://randomsubdomain.website.com-->https://www.randomsubdomain.website.comhttps://ftp.website.com-->http://ftp.website.comhttp://ftp.website.com-->http://ftp.website.comhttps://www.ftp.website.com-->http://ftp.website.comhttp://www.ftp.website.com-->http://ftp.website.com
1 answers
solution1
1 ACCPTED 2020-10-02 06:35:24
It appears you need to have 2 separate redirect rules here:
- For root domain to add
wwwandhttps:// - For sub domains to add
https://only
You can have your .htaccess as this:
<IfModule mod_rewrite.c>
RewriteEngine On
# enforce http:// and non-www for ftp domain:
RewriteCond %{HTTPS} on [OR]
RewriteCond %{HTTP_HOST} ^www\. [NC]
RewriteCond %{HTTP_HOST} ^(?:www\.)?(ftp\..+)$ [NC]
RewriteRule ^ http://%1%{REQUEST_URI} [L,NE,R=301]
RewriteCond %{HTTP_HOST} ^ftp\. [NC]
RewriteRule ^ - [L]
# Force HTTPS & WWW for any subdomain not in list
RewriteCond %{HTTPS} !on [OR]
RewriteCond %{HTTP_HOST} !^www\. [NC]
RewriteCond %{HTTP_HOST} !(?:^|\.)(?:ipv6|mail|mobile|staging|cpanel)\. [NC]
RewriteCond %{HTTP_HOST} ^(?:www\.)?(.+)$ [NC]
RewriteRule ^ https://www.%1%{REQUEST_URI} [L,NE,R=301]
# Force HTTPS & non-WWW for listed sub domains
RewriteCond %{HTTPS} !on [OR]
RewriteCond %{HTTP_HOST} ^www\. [NC]
RewriteCond %{HTTP_HOST} ^(?:www\.)?((?:ipv6|maill|mobile|staging|cpanel)\..+)$ [NC]
RewriteRule ^ https://%1%{REQUEST_URI} [L,NE,R=301]
</IfModule>
The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.