How Can I Redirect HTTP to HTTPS Using a web.config File on Windows Server?

Redirecting Requests to HTTPS Using a Web.config File on Windows

In the absence of an .htaccess file, users running Windows with IIS may seek alternative methods of enforcing HTTPS connections. This article demonstrates a simple yet effective solution using a web.config file, catering to users with limited familiarity with IIS and web.config.

Force HTTP to HTTPS Redirection

To redirect all resources to HTTPS in a web.config file, use the following code:

<?xml version="1.0" encoding="UTF-8"?>
<configuration>
    <system.webServer>
        <rewrite>
            <rules>
                <clear />
                <rule name="Redirect to https" stopProcessing="true">
                    <match url=".*" />
                    <conditions>
                        <add input="{HTTPS}" pattern="off" ignoreCase="true" />
                    </conditions>
                    <action type="Redirect" url="https://{HTTP_HOST}{REQUEST_URI}" redirectType="Permanent" appendQueryString="false" />
                </rule>
            </rules>
        </rewrite>
    </system.webServer>
</configuration>

Important Note

This solution operates independently of ASP.NET or PHP, leveraging the URL rewriting module to modify requests at a low level, ensuring HTTPS enforcement for all site assets.

The above is the detailed content of How Can I Redirect HTTP to HTTPS Using a web.config File on Windows Server?. For more information, please follow other related articles on the PHP Chinese website!