Title: Force HTTPS
Last modified: August 24, 2016

---

# Force HTTPS

 *  [silverpavelow](https://wordpress.org/support/users/silverpavelow/)
 * (@silverpavelow)
 * [11 years, 2 months ago](https://wordpress.org/support/topic/force-https-3/)
 * I know this question must be asked a thousand times a day but i have had no way
   that work. Most of the time, like changing the link in the general settings or
   the WordPress HTTPS (SSL) plugin, i get locked out of my dashboard or i get stuck
   in a never ending redirect loop. If you can, please allow the solution to work
   with CloudFlare. Thanks.

Viewing 13 replies - 16 through 28 (of 28 total)

[←](https://wordpress.org/support/topic/force-https-3/?output_format=md) [1](https://wordpress.org/support/topic/force-https-3/?output_format=md)
2

 *  Thread Starter [silverpavelow](https://wordpress.org/support/users/silverpavelow/)
 * (@silverpavelow)
 * [11 years, 2 months ago](https://wordpress.org/support/topic/force-https-3/page/2/#post-5998521)
 * Okay do i change it to [https://pavelow.net](https://pavelow.net) or [http://pavelow.net](http://pavelow.net)
 *  Thread Starter [silverpavelow](https://wordpress.org/support/users/silverpavelow/)
 * (@silverpavelow)
 * [11 years, 2 months ago](https://wordpress.org/support/topic/force-https-3/page/2/#post-5998523)
 * Okay i think i got it, change the site url to https and kept the wordpress one
   http, i think this works because the ssl is through cloudflare
 *  Thread Starter [silverpavelow](https://wordpress.org/support/users/silverpavelow/)
 * (@silverpavelow)
 * [11 years, 2 months ago](https://wordpress.org/support/topic/force-https-3/page/2/#post-5998524)
 * Now how do i get it so when you type in “pavelow.net” it redirects it to “[https://www.pavelow.net&#8221](https://www.pavelow.net&#8221);
 *  Moderator [James Huff](https://wordpress.org/support/users/macmanx/)
 * (@macmanx)
 * [11 years, 2 months ago](https://wordpress.org/support/topic/force-https-3/page/2/#post-5998526)
 * Do you want everyone to be forced to HTTPS? And you want to force the www?
 *  Thread Starter [silverpavelow](https://wordpress.org/support/users/silverpavelow/)
 * (@silverpavelow)
 * [11 years, 2 months ago](https://wordpress.org/support/topic/force-https-3/page/2/#post-5998527)
 * Since most browser support HTTPS, yes and i care about the www.
 *  Thread Starter [silverpavelow](https://wordpress.org/support/users/silverpavelow/)
 * (@silverpavelow)
 * [11 years, 2 months ago](https://wordpress.org/support/topic/force-https-3/page/2/#post-5998529)
 * Actually i would like to require the www, tried to use [https://pavelow.net](https://pavelow.net)
   and a lot of stuff didn’t work.
 *  Moderator [James Huff](https://wordpress.org/support/users/macmanx/)
 * (@macmanx)
 * [11 years, 2 months ago](https://wordpress.org/support/topic/force-https-3/page/2/#post-5998530)
 * www is an old protocol from back when everything was under separate server hardware.
   www (www.example.com) was the web server, mail (mail.example.com) was the mail
   server, ftp (ftp.example.com) was the FTP server, print (print.example.com) was
   the print server, etc.
 * These days, everything is run under the web server, making www. redundant and
   a waste of four characters.
 * Anyway, if you do want to force www and https, you’ll need to do as follows.
 * 1. Change both settings URLs to `https://www.pavelow.net`
 * 2. Check both your .htaccess file, hosting panel, and domain registrar for any
   forced redirects that may conflict with that.
 * If your site breaks after step 1, that means there is most definitely some forced
   redirect in step 2.
 *  Thread Starter [silverpavelow](https://wordpress.org/support/users/silverpavelow/)
 * (@silverpavelow)
 * [11 years, 2 months ago](https://wordpress.org/support/topic/force-https-3/page/2/#post-5998531)
 * How do i check for the forced redirects?
 *  Thread Starter [silverpavelow](https://wordpress.org/support/users/silverpavelow/)
 * (@silverpavelow)
 * [11 years, 2 months ago](https://wordpress.org/support/topic/force-https-3/page/2/#post-5998535)
 * Okay i add
 *     ```
       RewriteEngine On
       RewriteCond %{HTTP:X-Forwarded-Proto} =http
       RewriteRule ^ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]
       ```
   
 * to the .htaccess. This works for me, can you also try it.
 *  Moderator [James Huff](https://wordpress.org/support/users/macmanx/)
 * (@macmanx)
 * [11 years, 2 months ago](https://wordpress.org/support/topic/force-https-3/page/2/#post-5998536)
 * Why did you add that? If you set the URLs in settings, WordPress takes care of
   the redirect for you.
 *  Thread Starter [silverpavelow](https://wordpress.org/support/users/silverpavelow/)
 * (@silverpavelow)
 * [11 years, 2 months ago](https://wordpress.org/support/topic/force-https-3/page/2/#post-5998537)
 * I have already added the https to the site url but since the ssl is not on my
   web server change the wordpress url to https will lock me out.
 *  Moderator [James Huff](https://wordpress.org/support/users/macmanx/)
 * (@macmanx)
 * [11 years, 2 months ago](https://wordpress.org/support/topic/force-https-3/page/2/#post-5998538)
 * Ok, two things then:
 * 1. Your redirect works as desired.
 * 2. You want to protect the admin via SSL, more than the front end. There’s no
   reason to encrypt the front end if someone can just sniff your unencrypted password
   or hijack your unencrypted session when you’re over public wifi and you aren’t
   logging in via HTTPS. It sounds like your current situation makes that impossible.
 *  Moderator [James Huff](https://wordpress.org/support/users/macmanx/)
 * (@macmanx)
 * [11 years, 2 months ago](https://wordpress.org/support/topic/force-https-3/page/2/#post-5998539)
 * Just checking, did you install and activate [https://wordpress.org/plugins/cloudflare/](https://wordpress.org/plugins/cloudflare/)?
   It sounds like it improves compatibility with flexible SSL.
 * Also, these might help:
 * [https://support.cloudflare.com/hc/en-us/articles/203487280–How-do-I-fix-the-infinite-redirect-loop-error-after-enabling-Flexible-SSL-with-WordPress-](https://support.cloudflare.com/hc/en-us/articles/203487280–How-do-I-fix-the-infinite-redirect-loop-error-after-enabling-Flexible-SSL-with-WordPress-)
 * [https://blog.cloudflare.com/flexible-ssl-wordpress-fixing-mixed-content-errors/](https://blog.cloudflare.com/flexible-ssl-wordpress-fixing-mixed-content-errors/)

Viewing 13 replies - 16 through 28 (of 28 total)

[←](https://wordpress.org/support/topic/force-https-3/?output_format=md) [1](https://wordpress.org/support/topic/force-https-3/?output_format=md)
2

The topic ‘Force HTTPS’ is closed to new replies.

## Tags

 * [HTTP](https://wordpress.org/support/topic-tag/http/)
 * [HTTPS](https://wordpress.org/support/topic-tag/https/)
 * [SSL](https://wordpress.org/support/topic-tag/ssl/)

 * In: [Fixing WordPress](https://wordpress.org/support/forum/how-to-and-troubleshooting/)
 * 28 replies
 * 2 participants
 * Last reply from: [James Huff](https://wordpress.org/support/users/macmanx/)
 * Last activity: [11 years, 2 months ago](https://wordpress.org/support/topic/force-https-3/page/2/#post-5998539)
 * Status: not resolved

## Topics

### Topics with no replies

### Non-support topics

### Resolved topics

### Unresolved topics

### All topics