Updated HTTP_SERVER "https://*" and thought it would redirect all pages to https

[greg5sb]

But it still serves the basic http site when I don't type https in the address bar. Is this correct? Do I need to setup the redirect in the .htaccess file?

[DrByte]

Zen Cart simply responds to the incoming request. While setting HTTP_SERVER to an https URL is important, it's only while drawing the page contents that that takes effect.
ie: the "clicks" the user does after hitting the site will all be https.


So, yes, you'll need to do something in your server/hosting account to force https "on first hit" if it wasn't provided. Often that can be done via .htaccess

[carlwhat]

the redirect on the first hit, will, in the future be done from within ZC. you can copy the 3 new files, listed here:

https://github.com/zencart/zencart/pull/1525/files

and there is then no need for .htaccess redirects.

best.

[greg5sb]

Thanks for the info and replies DrByte and carlwhat. I'll copy those files.