Code to redirect non https to https

To redirect all non-HTTPS requests to HTTPS, you can use the .htaccess file on an Apache web server. Here is an example of the code that can be used to accomplish this:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [R=301,L]

This code uses the mod_rewrite module of Apache to check if the current connection is not using HTTPS, and if so, it redirects the user to the same URL, but using HTTPS. The [R=301,L] flag tells Apache to use a HTTP status code of 301 (permanent redirect) and stop processing any further rules.

You can also check if the server variable HTTP_X_FORWARDED_PROTO is set to http and redirect in that case:

RewriteEngine On
RewriteCond %{HTTP:X-Forwarded-Proto} !https
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

This code uses the mod_rewrite module of Apache to check if the current connection is not using HTTPS by checking the value of the “X-Forwarded-Proto” header and redirects the user to the same URL, but using HTTPS.

You should be careful with the use of .htaccess files as it can cause errors or security issues if not properly configured. It’s also important to have a valid SSL certificate installed on your server to have a successful redirect to https.