How can I have CodeIgniter load specific pages using SSL?

Posted on

How can I have CodeIgniter load specific pages using SSL? – Here in this article, we will share some of the most common and frequently asked about PHP problem in programming with detailed answers and code samples. There’s nothing quite so frustrating as being faced with PHP errors and being unable to figure out what is preventing your website from functioning as it should like php and apache . If you have an existing PHP-based website or application that is experiencing performance issues, let’s get thinking about How can I have CodeIgniter load specific pages using SSL?.

How can I have CodeIgniter load specific pages using SSL? I have an apache2/mode_ssl server. mod_ssl uses a different document root than non-secure pages. For example, https (port 443) would serve pages out of /var/www/ssl_html/ And http (port 80) serves pages out of /var/www/html/. How would I get CodeIgniter to play nice with this setup?

Solution :

There are few ways to tackle this.

Option 1:

I would probably have the code deployed to both folders, then in the file: /system/application/config/config.php, set your page to:

$config['base_url'] = ""; 


$config['base_url'] = "";

Then in your non-ssl VirtualHost folder, set your config to redirect protected pages by folder to the SSL site:

RedirectPermanent /sslfolder

Option 2:

Send everything to SSL and keep all your code in one folder

/system/application/config/config.php, set your page to:

$config['base_url'] = "";

Other Options

There are some more hacky ways to do this with header() redirects, etc. but I don’t think you want to maintain different code bases for this option. I don’t recommend this but you could do something like:

$config['base_url'] = “http://” . $_SERVER['http_host'] . “/”;

In application/config/config.php, set base_url to:

$config['base_url'] = ($_SERVER['SERVER_PORT'] == 443 ? 'https' : 'http') . "://{$_SERVER['HTTP_HOST']}/";

This will allow it to work on any domain, which is convenient if you test locally.

I put following lines in ./application/config/config.php file and it works perfectly:

$protocol = ( isset($_SERVER['HTTPS']) && $_SERVER['HTTPS'] == 'on' ) ? 'https' : 'http';
$config['base_url'] = $protocol.'://';

I would maintain two sets of the code and handle a forced redirect to HTTPS pages with a post_controller_constructor hook. The hook will be called before each page is rendered to check if the visitor should be redirected to HTTPS based on their current location on your site.


Create file: system/application/hooks/SecureAccount.php


class SecureAccount
    var $obj;

    //SecureAccount constructor
    function SecureAccount()
        $this->obj =& get_instance();

    //Redirect to https if in the account area without it
    function index()
        if(empty($_SERVER["HTTPS"]) || $_SERVER["HTTPS"] !== 'on')
            $this->obj =& get_instance();
            $this->obj->load->helper(array('url', 'http'));

            $current = current_url();
            $current = parse_url($current);

            if((stripos($current['path'], "/account/") !== false))
                $current['scheme'] = 'https';

                redirect(http_build_url('', $current), 'refresh');


Customize the path in the function for which areas of your site should be forced to use HTTPS.


Add the following to system/application/config/hooks.php

/* Force HTTPS for account area */
$hook['post_controller_constructor'] = array(
                                'class'    => 'SecureAccount',
                                'function' => 'index',
                                'filename' => 'SecureAccount.php',
                                'filepath' => 'hooks',
                                'params'   => array()

I can easily, I only define:

$config['base_url'] = '';

CI get base_url automaticaly =D

I solved the problem with in config.php

$config['ssl_active'] = false;
if (!empty($_SERVER['HTTPS']) && $_SERVER['HTTPS'] !== 'off' || $_SERVER['SERVER_PORT'] == 443) {
    $config['ssl_active'] = true;

$config['base_url'] = ($config['ssl_active'] === true )?"https":"http" . $_SERVER['HTTP_HOST'];

The directory trouble, you can use a simple simbolic link ln -s

This is what worked for me.
Our server both have $_SERVER[‘SERVER_PORT’] and $_SERVER[‘HTTP_X_FORWARDED_PORT’]

We should check first if $_SERVER[‘HTTP_X_FORWARDED_PORT’] is available and use this instead of $_SERVER[‘SERVER_PORT’]

$config['base_url'] =
( ( ( empty($_SERVER['HTTP_X_FORWARDED_PORT']) ? $_SERVER['SERVER_PORT'] : $_SERVER['HTTP_X_FORWARDED_PORT'] ) == 443 ? 'https' : 'http') . "://" . $_SERVER['HTTP_HOST'] )
. str_replace(basename($_SERVER['SCRIPT_NAME']),"",$_SERVER['SCRIPT_NAME']) ;

tested this on our linux server…

btw, it’s based on skyler’s answer before which was.

$config['base_url'] = ($_SERVER['SERVER_PORT'] == 443 ? 'https' : 'http') . "://{$_SERVER['HTTP_HOST']}/";

the solution that came to my mind is to use str_replace() like so

$base_url_str = base_url(); 
$secure_base_url = str_replace("http","https",$base_url_str );

whenever I need a secure location , i use $secure_base_url instead of base_url(),
so let’s say your base_url() is then $secure_base_url will be

another question is similar to this

you can use a protocol-relative url which will keep persistence in the linking in CI.

in your config.php instead of:

$config['base_url'] = '';


$config['base_url'] = '//';

information about protocol-relative links here.

Here’s a good solution.

Leave a Reply

Your email address will not be published. Required fields are marked *