I have the following code to force ssl on the login and admin pages via the .htaccess on a the domain example.com

<IfModule mod_rewrite.c>
RewriteEngine On
RewriteCond %{REQUEST_URI} ^/wp-(admin|loginurl) [NC]
RewriteCond %{HTTPS} !=on
RewriteCond %{HTTP_HOST} example\.com$ [NC]
RewriteRule ^ http://%{HTTP_HOST}%{REQUEST_URI} [L,R,QSA]

I'm also using iThemes Security 'Hide-backend' to change the wp-login to 'loginurl' due to a plugin conflict i can't use iThemes Security ssl features which forces ssl via the wp-config

The problem is with the above code ssl is not applied to the login or wp-admin pages. These pages are still served as http//

How can I modify the .htaccess to force ssl on the login and admin pages?

  • RewriteRule ^ http://%{HTTP_HOST}%{REQUEST_URI} – fuxia Jun 17 '15 at 0:32
  • Hi can you please expand on your comment. Are you making a suggestion, asking a questions or providing an answer? Thanks – Oudin Jun 17 '15 at 19:11
  • You are sending the visitors to http, not to https. – fuxia Jun 17 '15 at 19:16

You can use the define('FORCE_SSL_LOGIN', true); options provided by WP. You just have to add the line in wp-config.php. Here is the link to wordpress codex, in case that you need more examples.

  • Please read my question before answering I stated this can't be done via the wp-config due to a conflict. Thanks – Oudin Jun 17 '15 at 19:09
  • sorry about that. you can try like this <IfModule mod_rewrite.c> RewriteEngine On RewriteCond %{SERVER_PORT} 80 RewriteCond %{REQUEST_URI} wp-admin RewriteRule ^(.*)$ https://www.example.com/wp-admin/$1 [R,L] </IfModule> – user2319361 Jun 18 '15 at 9:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.