How Can I Enforce SSL/HTTPS on Specific PHP Pages?

Enforcing SSL/https on Specific PHP Pages Using .htaccess and mod_rewrite

To enforce SSL/https on specific PHP pages, one can utilize Apache's mod_ssl and mod_rewrite modules.

Apache's mod_ssl

The SSLRequireSSL directive enforces SSL by prohibiting access unless HTTPS is employed. This directive is useful within SSL-enabled virtual hosts or directories, preventing exposure of protected content due to configuration errors.

mod_rewrite in .htaccess

For redirecting to HTTPS, mod_rewrite can be used in .htaccess with the following code:

RewriteEngine On
RewriteCond %{HTTPS} !=on
RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

PHP Solution

If .htaccess is disabled, the following PHP code can be employed:

if (!isset($_SERVER['HTTPS']) || $_SERVER['HTTPS'] !== 'on') {
    if(!headers_sent()) {
        header("Status: 301 Moved Permanently");
        header(sprintf(
            'Location: https://%s%s',
            $_SERVER['HTTP_HOST'],
            $_SERVER['REQUEST_URI']
        ));
        exit();
    }
}

Additional resources on redirecting to HTTPS:

• http://www.askapache.com/htaccess/http-https-rewriterule-redirect.html

The above is the detailed content of How Can I Enforce SSL/HTTPS on Specific PHP Pages?. For more information, please follow other related articles on the PHP Chinese website!