2012-11-30 137 views
3

如何强制我的网站在整个网站中使用https://?我的网站是用CentOS上的CodeIgniter,MySQL,& Apache构建的,任何人都可以请赐教。强制https协议

编辑

我使用笨,它有这个的.htaccess。因为我在我的评论中提到下面,我想要做的相反(在网站的某些部分迫使https):

.htaccess我的系统上:

Options -Indexes 
<IfModule mod_rewrite.c> 
    RewriteEngine On 
    RewriteBase/

    #Removes access to the system folder by users. 
    #Additionally this will allow you to create a System.php controller, 
    #previously this would not have been possible. 
    #'system' can be replaced if you have renamed your system folder. 
    RewriteCond %{REQUEST_URI} ^system.* 
    RewriteRule ^(.*)$ /index.php?/$1 [L] 

    #When your application folder isn't in the system folder 
    #This snippet prevents user access to the application folder 
    #Submitted by: Fabdrol 
    #Rename 'application' to your applications folder name. 
    RewriteCond %{REQUEST_URI} ^application.* 
    RewriteRule ^(.*)$ /index.php?/$1 [L] 

    #Checks to see if the user is attempting to access a valid file, 
    #such as an image or css document, if this isn't true it sends the 
    #request to index.php 
    RewriteCond %{REQUEST_FILENAME} !-f 
    RewriteCond %{REQUEST_FILENAME} !-d 
    RewriteRule ^(.*)$ index.php?/$1 [L] 
</IfModule> 

<IfModule !mod_rewrite.c> 
    # If we don't have mod_rewrite installed, all 404's 
    # can be sent to index.php, and everything works as normal. 
    # Submitted by: ElliotHaughin 

    ErrorDocument 404 /index.php 
</IfModule> 

如果我添加什么@Dale建议:

RewriteEngine On 
RewriteCond %{HTTPS} off 
RewriteCond ^(login|register|userportal) 
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} 

我得到回复。有什么想法吗?

回答

7

我已经在过去使用该情况,.htaccess文件

RewriteEngine On 
RewriteCond %{HTTPS} off 
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} 

可能有更好的实现,但它总是为我工作

如果你要删除的WWW部分我已经使用这种

RewriteCond %{HTTP_HOST} ^www\.(.+) 
RewriteCond %{HTTPS}s/%1 ^(on(s)|offs)/(.+) 
RewriteRule^http%2://%3%{REQUEST_URI} [L,R=301] 

这里的合治

RewriteEngine On 
RewriteCond %{HTTPS} off 
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} 

RewriteCond %{HTTP_HOST} ^www\.(.+) 
RewriteCond %{HTTPS}s/%1 ^(on(s)|offs)/(.+) 
RewriteRule^http%2://%3%{REQUEST_URI} [L,R=301] 

这涉及的协议,然后再删除W公司

更新:

强制执行,你可以使用类似

RewriteEngine On 
RewriteCond %{HTTPS} off 
RewriteCond ^(login|register|userportal) 
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} 

你当然会删除此特定的目录https协议(下面)如果你使用上述

RewriteEngine On 
RewriteCond %{HTTPS} off 
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} 
+0

是否有任何调整在这里,以防万一我想强制www.site.com到site.com?仍然在'https'协议中? – fishcracker

+0

@fishcracker我添加了更多的代码来处理www – Dale

+0

如果我做了相反的事情呢?我只想在某些网址上强制使用https,例如http://mysite.com/login,http://mysite.com/register,&http://mysite.com/userportal及其细分(userportal/profile ,userportal /注销)?谢谢! – fishcracker