If you want to force your entire website to go through https, you can add these rules to your .htaccess file: RewriteEngine OnRewriteCond %{HTTPS} offRewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]