My website doesnt redirect traffic to https

[untitled111]

ayawn.ct.ws

Error Message

i dont see an error message but some poeple said they cant open the site because it shows up as not secure on their end but when i send them the link with https:// in the beginning, it works

Other Information

i am using this .htaccess code and my .htaccess is placed inside the htdocs

RewriteEngine On
RewriteCond %{HTTP:X-Forwarded-Proto} !https
RewriteCond %{HTTPS} off
RewriteCond %{HTTP:CF-Visitor} !{"scheme":"https"}
RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

[wasik405]

Welcome to the community.
For me, it does redirect all traffic to HTTPS, which likely means it’s due to their browser cache. Ask them to clear their browser cache

[untitled111]

i checked redirects using several websites but it shows that my website still uses http and doesnt redirect, i asked chatgpt and it said that this doesnt work because .htaccess is for apache servers only and my website is running openresty which is basically nginx.

[dan3008]

Welcome to the forum

Before moving to a custom domain and cloudflare to force HTTPS I used:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

and that worked fine. so yours looks like it should work.

Having visited your site myself, it automatically redirects to HTTPS for me too. What websites have you used to check the redirects?

[wasik405]

@untitled111

i checked redirects using several websites but it shows that my website still uses http and doesnt redirect

Are you using an online tool to check the redirect? Because most of them will not work due to this security system:

Ensuring only web browsers can access your website

InfinityFree is a website hosting service. That means that the hosting accounts we provided are intended for hosting websites. Websites contain pages that are accessed through web browsers. InfinityFree is not intended to be used for file sharing, API hosting, database hosting or background tasks/tools. To help enforce this, free hosting enforces a security system that makes sure that anyone trying to access your website is using a normal web browser. This is done by checking whether the web br…

So, the best way to check if forced HTTPS is working or not is to do it manually. If it doesn’t work, try clearing the cache. Because your site is forcing HTTPS when I visit it.

@untitled111

i asked chatgpt and it said that this doesnt work because .htaccess is for apache servers only and my website is running openresty which is basically nginx.

Actually, free hosting web servers use a combination of Nginx and Apache, which means .htaccess will work. So, ChatGPT is somewhat wrong here.

[untitled111]

thank you i was skeptical because of the sites telling me im not using https but now my doubt is cleared thank you very much

[untitled111]

yes i am also using something similar and its working i just was skeptical and thanks for replying