• Resolved step8601

    (@step8601)


    even though i have https://www.mysite.com in all wp configurable places, i can still go to https://mysite.com

    is there a way to force both https and www in all urls and images/resources that doesn’t mess up All In One WP Security & Firewall ?

    i’ve tried some force https plugins but they don’t force www as well, but i’d rather do something just with All In One WP Security & Firewall so i can reduce plugins

    thanks

Viewing 9 replies - 1 through 9 (of 9 total)
  • Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi, your question is not really related to this plugin. There is no feature in the plugin that controls the URL address of your site.

    Have you also spoken to your host about this issue?

    Do you have a Google account? If you don’t I suggest that you create a google account and also add your preference through Google Webmasters Tools.

    Let me know if you need more help.

    Kind regards

    Thread Starter step8601

    (@step8601)

    ah, sorry, if i find something i’ll post it, appreciate the plugin though, great plugin, thanks

    Plugin Contributor mbrsolution

    (@mbrsolution)

    No problem ??

    You can post a solution when you find one for others to know if you like. I will mark this support thread as resolved since it’s not really related to this plugins functionality.

    Kind regards

    Thread Starter step8601

    (@step8601)

    i manually added the following to nearly the end of htaccess (see BEGIN FORCE WWW AND HTTPS comments) and shazam it works (i left the /IfModule and END WordPress stuff there to show that this is nearly at the very end of the htaccess file, change mysite of course :

    =========================================

    ## BEGIN FORCE WWW AND HTTPS

    RewriteCond %{HTTP_HOST} ^mysite.com
    RewriteRule ^(.*)$ https://www.mysite.com/$1 [R=301,L]

    ## END FORCE WWW AND HTTPS

    </IfModule>

    # END WordPress

    ======================================

    however, i’m now wondering how i can preserve this when i do plugin updates, i did some plugin updates recently and then i had to re-add this manually to get it working again

    could i add this under Brute Force > Custom .htaccess rules ?

    do i have to check both (1) Enable Custom .htaccess Rules and (2) Place custom rules at the top, and then enter the custom htaccess code

    or can i just check “Place custom rules at the top” and then enter the custom htaccess code?

    in other words, do i need to also check “Enable Custom .htaccess Rules”? will this override the existing htaccess?

    thanks

    • This reply was modified 7 years ago by step8601.
    Plugin Contributor mbrsolution

    (@mbrsolution)

    Hi, can you clarify the following comment? Are you talking about updating this plugin or other plugins?

    however, i’m now wondering how i can preserve this when i do plugin updates, i did some plugin updates recently and then i had to re-add this manually to get it working again

    ========================================================

    could i add this under Brute Force > Custom .htaccess rules ?

    Yes you can as per the following instructions added for this feature.

    This feature can be used to apply your own custom .htaccess rules and directives.

    It is useful for when you want to tweak our existing firewall rules or when you want to add your own.

    NOTE: This feature can only used if your site is hosted in an apache or similar web server.

    ========================================================

    do i have to check both (1) Enable Custom .htaccess Rules and (2) Place custom rules at the top, and then enter the custom htaccess code

    Yes if you want your rules to appear at the top of the .htaccess file.

    in other words, do i need to also check “Enable Custom .htaccess Rules”? will this override the existing htaccess?

    The custom rules do not change the rules added by the plugin or alter any rules you already have in the .htaccess file.

    Let me know if you need more information or help.

    Kind regards

    Thread Starter step8601

    (@step8601)

    “The custom rules do not change the rules added by the plugin or alter any rules you already have in the .htaccess file.”

    yeehah!

    i’ll add the force https and www stuff via brute force > custom and see how it goes, will report back

    this would be a big help, i’m trying to enforce security but also eliminate content redundancy (www vs non-www)

    super thanks ??

    Thread Starter step8601

    (@step8601)

    okay, i first disabled the force ssl plugins i was trying, i then checked both boxes under brute force > custom, and then i entered the following into the Enter Custom .htaccess Rules textbox (except changed the urls for my site):

    ###### BEGIN FORCE HTTPS AND WWW
    <IfModule mod_rewrite.c>
    RewriteCond %{HTTP_HOST} ^mysite.com
    RewriteRule ^(.*)$ https://www.mysite.com/$1 [R=301,L]
    </IfModule>
    ###### END FORCE HTTPS AND WWW

    and so far i am one happy puppy ??

    i noticed that it was added at the top of the All In One WP Security area in the htaccess file like so (but don’t add all this in the textbox, just what i mentioned above), this is just for info to show where it is in the file:

    # BEGIN All In One WP Security
    #AIOWPS_CUSTOM_RULES_START
    ###### BEGIN FORCE HTTPS AND WWW
    <IfModule mod_rewrite.c>
    RewriteCond %{HTTP_HOST} ^mysite.com
    RewriteRule ^(.*)$ https://www.mysite.com/$1 [R=301,L]
    </IfModule>
    ###### END FORCE HTTPS AND WWW

    so far, so good, will report back with any issues

    thanks again

    • This reply was modified 7 years ago by step8601.
    Thread Starter step8601

    (@step8601)

    sorry, it’s under Firewall > Custom Rules

    geez

    Plugin Contributor mbrsolution

    (@mbrsolution)

    I am happy to hear that so far you are happy with the outcome of your steps and the plugin custom rules feature. Also thank you for sharing with us.

    Kind regards

Viewing 9 replies - 1 through 9 (of 9 total)
  • The topic ‘force https://www – how?’ is closed to new replies.