Force https on login.php

[haydentech]

I saw that there is a Force HTTPS setting in the admin settings. I don't necessarily want my entire site served via HTTPS, but I do want the login page to require it. Is there any way to force just the login page to use HTTPS?

[mudmin]

You can just drop the same code snippet we use in your login.php or (preferably) copy your login.php over to usersc/login.php, point the init to ../users/init.php and add this snippet somewhere near the top...

Code:

if (!isset($_SERVER['HTTPS']) || !$_SERVER['HTTPS']) {

Code:

$url = 'https://'.$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'];

Code:

Redirect::to($url);

Code:

exit;

Code:

}

[haydentech]

That worked perfectly. Thanks!

[mudmin]

Awesome! Glad to help.