Title: force https://www – how? Last modified: March 1, 2018 --- # force https://www – how? * Resolved [step8601](https://wordpress.org/support/users/step8601/) * (@step8601) * [8 years, 3 months ago](https://wordpress.org/support/topic/force-https-www-how/) * even though i have [https://www.mysite.com](https://www.mysite.com) in all wp configurable places, i can still go to [https://mysite.com](https://mysite.com) * is there a way to force both https and www in all urls and images/resources that doesn’t mess up All In One WP Security & Firewall ? * i’ve tried some force https plugins but they don’t force www as well, but i’d rather do something just with All In One WP Security & Firewall so i can reduce plugins * thanks Viewing 9 replies - 1 through 9 (of 9 total) * Plugin Contributor [mbrsolution](https://wordpress.org/support/users/mbrsolution/) * (@mbrsolution) * [8 years, 3 months ago](https://wordpress.org/support/topic/force-https-www-how/#post-10029817) * Hi, your question is not really related to this plugin. There is no feature in the plugin that controls the URL address of your site. * Have you also spoken to your host about this issue? * Do you have a Google account? If you don’t I suggest that you create a google account and also add your preference through [Google Webmasters Tools](https://www.google.com/webmasters/tools/home?hl=en). * Let me know if you need more help. * Kind regards - This reply was modified 8 years, 3 months ago by [mbrsolution](https://wordpress.org/support/users/mbrsolution/). * Thread Starter [step8601](https://wordpress.org/support/users/step8601/) * (@step8601) * [8 years, 3 months ago](https://wordpress.org/support/topic/force-https-www-how/#post-10031863) * ah, sorry, if i find something i’ll post it, appreciate the plugin though, great plugin, thanks * Plugin Contributor [mbrsolution](https://wordpress.org/support/users/mbrsolution/) * (@mbrsolution) * [8 years, 3 months ago](https://wordpress.org/support/topic/force-https-www-how/#post-10033618) * No problem 🙂 * You can post a solution when you find one for others to know if you like. I will mark this support thread as resolved since it’s not really related to this plugins functionality. * Kind regards * Thread Starter [step8601](https://wordpress.org/support/users/step8601/) * (@step8601) * [8 years, 3 months ago](https://wordpress.org/support/topic/force-https-www-how/#post-10049676) * i manually added the following to nearly the end of htaccess (see BEGIN FORCE WWW AND HTTPS comments) and shazam it works (i left the /IfModule and END WordPress stuff there to show that this is nearly at the very end of the htaccess file, change mysite of course : * ========================================= * ## BEGIN FORCE WWW AND HTTPS * RewriteCond %{HTTP_HOST} ^mysite.com RewriteRule ^(.*)$ [https://www.mysite.com/$1](https://www.mysite.com/$1)[ R=301,L] * ## END FORCE WWW AND HTTPS * * # END WordPress * ====================================== * however, i’m now wondering how i can preserve this when i do plugin updates, i did some plugin updates recently and then i had to re-add this manually to get it working again * could i add this under Brute Force > Custom .htaccess rules ? * do i have to check both (1) Enable Custom .htaccess Rules and (2) Place custom rules at the top, and then enter the custom htaccess code * or can i just check “Place custom rules at the top” and then enter the custom htaccess code? * in other words, do i need to also check “Enable Custom .htaccess Rules”? will this override the existing htaccess? * thanks - This reply was modified 8 years, 3 months ago by [step8601](https://wordpress.org/support/users/step8601/). * Plugin Contributor [mbrsolution](https://wordpress.org/support/users/mbrsolution/) * (@mbrsolution) * [8 years, 3 months ago](https://wordpress.org/support/topic/force-https-www-how/#post-10051531) * Hi, can you clarify the following comment? Are you talking about updating this plugin or other plugins? * > however, i’m now wondering how i can preserve this when i do plugin updates, > i did some plugin updates recently and then i had to re-add this manually to > get it working again * ======================================================== * > could i add this under Brute Force > Custom .htaccess rules ? * Yes you can as per the following instructions added for this feature. * > This feature can be used to apply your own custom .htaccess rules and directives. > It is useful for when you want to tweak our existing firewall rules or when > you want to add your own. > NOTE: This feature can only used if your site is hosted in an apache or similar > web server. * ======================================================== * > do i have to check both (1) Enable Custom .htaccess Rules and (2) Place custom > rules at the top, and then enter the custom htaccess code * Yes if you want your rules to appear at the top of the .htaccess file. * > in other words, do i need to also check “Enable Custom .htaccess Rules”? will > this override the existing htaccess? * The custom rules do not change the rules added by the plugin or alter any rules you already have in the .htaccess file. * Let me know if you need more information or help. * Kind regards * Thread Starter [step8601](https://wordpress.org/support/users/step8601/) * (@step8601) * [8 years, 3 months ago](https://wordpress.org/support/topic/force-https-www-how/#post-10057560) * “The custom rules do not change the rules added by the plugin or alter any rules you already have in the .htaccess file.” * yeehah! * i’ll add the force https and www stuff via brute force > custom and see how it goes, will report back * this would be a big help, i’m trying to enforce security but also eliminate content redundancy (www vs non-www) * super thanks 🙂 * Thread Starter [step8601](https://wordpress.org/support/users/step8601/) * (@step8601) * [8 years, 2 months ago](https://wordpress.org/support/topic/force-https-www-how/#post-10065129) * okay, i first disabled the force ssl plugins i was trying, i then checked both boxes under brute force > custom, and then i entered the following into the Enter Custom .htaccess Rules textbox (except changed the urls for my site): * ###### BEGIN FORCE HTTPS AND WWW RewriteCond %{HTTP_HOST} ^mysite.com RewriteRule ^(.*)$ [https://www.mysite.com/$1](https://www.mysite.com/$1)[ R=301,L] ###### END FORCE HTTPS AND WWW * and so far i am one happy puppy 🙂 * i noticed that it was added at the top of the All In One WP Security area in the htaccess file like so (but don’t add all this in the textbox, just what i mentioned above), this is just for info to show where it is in the file: * # BEGIN All In One WP Security #AIOWPS_CUSTOM_RULES_START ###### BEGIN FORCE HTTPS AND WWW RewriteCond %{HTTP_HOST} ^mysite.com RewriteRule ^(.*)$ [https://www.mysite.com/$1](https://www.mysite.com/$1) [R=301,L] ###### END FORCE HTTPS AND WWW * so far, so good, will report back with any issues * thanks again - This reply was modified 8 years, 2 months ago by [step8601](https://wordpress.org/support/users/step8601/). * Thread Starter [step8601](https://wordpress.org/support/users/step8601/) * (@step8601) * [8 years, 2 months ago](https://wordpress.org/support/topic/force-https-www-how/#post-10065662) * sorry, it’s under Firewall > Custom Rules * geez * Plugin Contributor [mbrsolution](https://wordpress.org/support/users/mbrsolution/) * (@mbrsolution) * [8 years, 2 months ago](https://wordpress.org/support/topic/force-https-www-how/#post-10067019) * I am happy to hear that so far you are happy with the outcome of your steps and the plugin custom rules feature. Also thank you for sharing with us. * Kind regards Viewing 9 replies - 1 through 9 (of 9 total) The topic ‘force https://www – how?’ is closed to new replies. * ![](https://ps.w.org/all-in-one-wp-security-and-firewall/assets/icon-256x256. png?rev=2798307) * [All-In-One Security (AIOS) – Security and Firewall](https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/) * [Frequently Asked Questions](https://wordpress.org/plugins/all-in-one-wp-security-and-firewall/#faq) * [Support Threads](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/) * [Active Topics](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/active/) * [Unresolved Topics](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/unresolved/) * [Reviews](https://wordpress.org/support/plugin/all-in-one-wp-security-and-firewall/reviews/) * 9 replies * 2 participants * Last reply from: [mbrsolution](https://wordpress.org/support/users/mbrsolution/) * Last activity: [8 years, 2 months ago](https://wordpress.org/support/topic/force-https-www-how/#post-10067019) * Status: resolved