Force https for manual installs on remote servers
I have PHPpos installed on a remote server (same one as my website server). Although I have a SSL certificate installed for the program, I've noticed while using the program/navigating through the various pages that it keeps bouncing back and forth between un-encrypted http:// and encrypted https://.
This is solved easily by adding the following lines to the .htaccess file located in the root folder of the program:
# Force all traffic to https://. Prevent any insecure transmission of data.
RewriteCond %{HTTPS} off
RewriteCond %{HTTP:X-Forwarded-Proto} !https
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
Comments
2 comments
Check the box in store config Do Not Force HTTP When Needed For EMV Credit Card Processing:
OOPS! Good call. I was working through the Config page and hadn't gotten down that far yet.
Please sign in to leave a comment.