How to Redirect HTTPS to HTTP for Catalog & Product Pages

httpssecure

we are using https for secure pages.

we can see http for unsecure pages – products and catalog pages.

we can see https for secure pages – My account, Login pages.

But if we manually type https:// for home , catalog & product pages, its redirecting to https only. but i want to redirect to http

before home page, catalog & product pages are in https.

i followed this in .htaccess:

#Redirect your Homepage from HTTPS to HTTP
RewriteCond %{HTTPS} on
RewriteRule ^$ http://%{HTTP_HOST} [L,R]

source : http://www.activo.com/redirect-https-to-http-for-any-homepage/

Than home page is working fine.

if we manually type https://example.com for home page ,its rediretcting to http://example.com. It's fine

what i have to do for catalog & product pages.

Best Answer

Method 1: You may try this as well. It is specifically targeting your catalog and product page with help of editing .htaccess

    RewriteEngine On
    RewriteCond %{HTTPS} on
    RewriteEngine On

    # From https to http
    RewriteCond %{REQUEST_URI} !^/catalogpage/
    RewriteCond %{REQUEST_URI} !^/productpage/
    RewriteRule ^(.*)$ http://%{HTTP_HOST} [L,R=301]

And set "Auto-redirect to Base URL" to NO under System -> Configuration -> Web -> Url Options

Method 2: Please visit following tutorial about redirecting https to http on catalog and product page:

https://www.designhaven.co.uk/2013/06/redirecting-secure-https-non-secure-http-magento/

Related Solutions

Magento – How to make https URL to http

There is a function just for that, called shouldUrlBeSecure located in app/code/core/Mage/Core/Model/Config.php on line 1477.

Here is the complete function:

/**
 * Check whether given path should be secure according to configuration security requirements for URL
 * "Secure" should not be confused with https protocol, it is about web/secure/*_url settings usage only
 *
 * @param string $url
 * @return bool
 */
public function shouldUrlBeSecure($url)
{
    if (!Mage::getStoreConfigFlag(Mage_Core_Model_Store::XML_PATH_SECURE_IN_FRONTEND)) {
        return false;
    }

    if (!isset($this->_secureUrlCache[$url])) {
        $this->_secureUrlCache[$url] = false;
        $secureUrls = $this->getNode('frontend/secure_url');
        foreach ($secureUrls->children() as $match) {
            if (strpos($url, (string)$match) === 0) {
                $this->_secureUrlCache[$url] = true;
                break;
            }
        }
    }

    return $this->_secureUrlCache[$url];
}

To see which URLs should be secure you can add a simple Mage::log($secureUrls) inside the if statement. This is what my log entry looked like:

2014-02-12T11:55:26+00:00 DEBUG (7): Mage_Core_Model_Config_Element Object
(
    [install] => /install/wizard/checkSecureHost
    [customer] => /customer/
    [sales] => /sales/
    [authorizenet_paygate] => /paygate/authorizenet_payment
    [checkout_onepage] => /checkout/onepage
    [checkout_multishipping] => /checkout/multishipping
    [paypal_express] => /paypal/express
    [paypal_standard] => /paypal/standard
    [paypal_express_callbackshippingoptions] => paypal/express/callbackshippingoptions
    [googlecheckout_redirect] => /googlecheckout/redirect/
    [googlecheckout_beacon] => /googlecheckout/api/beacon/
    [googlecheckout_api] => /googlecheckout/api/
    [review_customer] => /review/customer/
    [tag_customer] => /tag/customer/
    [wishlist] => /wishlist/
    [paypaluk_express] => /paypaluk/express
    [rss_catalog_review] => /rss/catalog/review
    [rss_order_new] => /rss/order/new
    [rss_catalog_notifystock] => /rss/catalog/notifystock
    [centinel] => /centinel/
    [newsletter_manage] => /newsletter/manage/
    [downloadable] => /downloadable/customer/
    [downloadable_download] => /downloadable/download/
    [ogone_api] => /ogone/api
    [persistent_onepage_register] => /persistent/index/saveMethod
    [checkout_cart] => /checkout/cart
    [storecredit_info] => /storecredit/info/
    [giftcard_customer] => /giftcard/customer/
    [enterprise_pbridge_pbridge] => /enterprise_pbridge/pbridge/
    [invitation] => /invitation/
)

Now to figure out how Magento switches HTTP to HTTPS I think you would most likely have dive into the Zend framework in the lib inside lib/Zend/Http/* because it contains files of most interest. Well, anyway hope this helped. Good luck!

Magento 1.7 HTTPS – How to Do 301 Redirect Instead of 302

If you've disabled the "Auto-redirect to Base URL" setting, then Magento isn't responsible for the 302 redirect to https. This must be caused elsewhere, most likely in your .htaccess or VirtualHost on your server. That being the case you should just find where this is and change it from 302 to 301.

If you have access to the VirtualHosts you can likely just put the following in the http VirtualHost (likely the one containing *:80 in the declaration.

RewriteRule ^(.*)$ https://yourdomain.com/$1 [R=301,L]

If you don't have access to edit the VirtualHost you can put something like this in the .htaccess file.

RewriteCond %{HTTPS} !=on
RewriteRule ^(.*)$ https://yourdomain.com/$1 [L,R=301]

Best Answer

Related Solutions

Magento – How to make https URL to http

Magento 1.7 HTTPS – How to Do 301 Redirect Instead of 302

Related Topic