强制执行.htaccess中的SSL + WWW,同时启用其他子域

时间:2015-11-25 20:28:53

标签: .htaccess ssl

请有人解释如何更改我的.htaccess文件中的以下摘录以强制使用SSL + www。并允许访问子域。

目前,所有用户都被迫使用SSL,但他们可以通过https://www.domain.co.ukhttps://domain.co.uk(而不仅仅是https://www.domain.co.uk)访问该网站。同时,他们无法访问子域。如果他们尝试这样做,则会将其从http://sub.domain.co.uk重定向到https://sub.domain.co.ukhttp://www.domain.co.uk/sub(而不是从http://sub.domain.co.uk重定向到http://sub.domain.co.uk

RewriteEngine On
RewriteCond %{SERVER_PORT} 80 
RewriteRule ^(.*)$ https://www.DOMAIN.co.uk/$1 [R,L]
RewriteBase /
RewriteRule ^sitemap.xml$ index.php?route=feed/google_sitemap [L]
RewriteRule ^googlebase.xml$ index.php?route=feed/google_base [L]
RewriteRule ^system/download/(.*) /index.php?route=error/not_found [L]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteCond %{REQUEST_URI} !.*\.(ico|gif|jpg|jpeg|png|js|css)
RewriteRule ^([^?]*) index.php?_route_=$1 [L,QSA]

除此代码外,我还有许多(100+)302重定向,例如

Redirect 302 /ProductName http://www.NEWDOMAIN.com/ProductName

这些重定向目前位于RewriteEngine On

之间
RewriteCond %{SERVER_PORT} 80 

1 个答案:

答案 0 :(得分:1)

这是一种简单的方法,可以在不弄乱其他子域的情况下执行此操作,并确保您的常规域始终转到https。

替换此

RewriteEngine On
RewriteCond %{SERVER_PORT} 80 
RewriteRule ^(.*)$ https://www.DOMAIN.co.uk/$1 [R,L]
RewriteBase /

用这个

RewriteEngine On
RewriteBase /
RewriteCond %{HTTPS} !^on
RewriteCond %{HTTP_HOST} ^(www\.)?domain\.co\.uk [NC]
RewriteRule ^(.*)$ https://www.domain.co.uk/$1 [R=301,L]

RewriteCond %{HTTPS} ^on
RewriteCond %{HTTP_HOST} ^domain\.co\.uk [NC]
RewriteRule ^(.*)$ https://www.domain.co.uk/$1 [R=301,L]

根据您的评论。

RewriteCond %{HTTP_HOST} ^(www\.)?domain\.co\.uk [NC]
RewriteCond %{REQUEST_URI} !^/(subfolder1|subfolder2)
RewriteRule ^(.*)$ https://www.domain.co.uk/$1 [R=301,L]

RewriteCond %{HTTPS} ^on
RewriteCond %{HTTP_HOST} ^domain\.co\.uk [NC]
RewriteCond %{REQUEST_URI} !^/(subfolder1|subfolder2)
RewriteRule ^(.*)$ https://www.domain.co.uk/$1 [R=301,L]