强制https协议

Question

如何使我的网站在整个网站中使用https://？我的网站是用CodeIgniter、MySQL和Apache在CentOS上建立的，任何人都能给我一点启发吗？

编辑

我使用的是CodeIgniter，它有这个.htaccess。正如我在下面的评论中提到的，我想做相反的事情(强迫https在网站的某些部分)：

我的系统上的.htaccess：

Options -Indexes
<IfModule mod_rewrite.c>
    RewriteEngine On
    RewriteBase /

    #Removes access to the system folder by users.
    #Additionally this will allow you to create a System.php controller,
    #previously this would not have been possible.
    #'system' can be replaced if you have renamed your system folder.
    RewriteCond %{REQUEST_URI} ^system.*
    RewriteRule ^(.*)$ /index.php?/$1 [L]

    #When your application folder isn't in the system folder
    #This snippet prevents user access to the application folder
    #Submitted by: Fabdrol
    #Rename 'application' to your applications folder name.
    RewriteCond %{REQUEST_URI} ^application.*
    RewriteRule ^(.*)$ /index.php?/$1 [L]

    #Checks to see if the user is attempting to access a valid file,
    #such as an image or css document, if this isn't true it sends the
    #request to index.php
    RewriteCond %{REQUEST_FILENAME} !-f
    RewriteCond %{REQUEST_FILENAME} !-d
    RewriteRule ^(.*)$ index.php?/$1 [L]
</IfModule>

<IfModule !mod_rewrite.c>
    # If we don't have mod_rewrite installed, all 404's
    # can be sent to index.php, and everything works as normal.
    # Submitted by: ElliotHaughin

    ErrorDocument 404 /index.php
</IfModule>

如果我加上@Dale的建议：

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteCond ^(login|register|userportal)
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

我得到响应500。有什么想法吗？

Answer 1

我以前在.htaccess文件中使用过这个

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

也许会有更好的实现，但它总是适用于我

如果您想删除www部分，我已经使用了

RewriteCond %{HTTP_HOST} ^www\.(.+)
RewriteCond %{HTTPS}s/%1 ^(on(s)|offs)/(.+)
RewriteRule ^ http%2://%3%{REQUEST_URI} [L,R=301]

这是合并规则

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

RewriteCond %{HTTP_HOST} ^www\.(.+)
RewriteCond %{HTTPS}s/%1 ^(on(s)|offs)/(.+)
RewriteRule ^ http%2://%3%{REQUEST_URI} [L,R=301]

这首先处理协议，然后删除w

更新：

要对特定目录强制使用https协议，可以使用以下内容

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteCond ^(login|register|userportal)
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}

如果您使用上面的内容，您当然会删除这个(下面)

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}