On Whynopadlock, you need to run it without the querystring - just https://www.yoursite.com/login.php

Ok, what I did is left the home url and forum url back to https[sitename]. I changed the white list to http[sitename] and it seems to work...

Awesome! Now if you type in http://www.yoursite.com - does it automatically go to HTTPS for you? What if you type in http://yoursite.com (no www)

If I type in http I get this:

http://www.XXXXXXXXXXXXXX.com/


if I do no www I get this:

http://XXXXXXX.com/


So what do I do now????? Thanks

--------------- Added [DATE]1381802451[/DATE] at [TIME]1381802451[/TIME] ---------------

SHould I try your redirect again?

--------------- Added [DATE]1381802564[/DATE] at [TIME]1381802564[/TIME] ---------------

Ok, tried your htaccess again and it threw an internal error when logging off... had to remove it...

Maybe if you give us your real url we can see it for or selfs

XXXXXXXXXXXX

That htaccess file should not be causing any errors. Do you have other rewrite rules in there?

Try just this part. Needs to go at the very end:

(No changes needed there. Leave exactly as is)

Let me know when you do this, so I can try loading your site again.

Here is my rewrite:

...

#RewriteCond %{HTTP_HOST} !^www.XXXXXXXXXXXXX.com$ [NC]
#RewriteRule ^(.*)$ https://www.XXXXXXXXXXXXXXXX.com/$1 [R=301,L]

#RewriteCond %{HTTPS} off
#RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}


I commented out yours... until I get it fixed...

--------------- Added [DATE]1381803782[/DATE] at [TIME]1381803782[/TIME] ---------------

Ok, made the changes...

OH no wonder this blew up!! Yeah, we need to get it to play friendly with the rest of your rules :)

First of all, I don't see any rewrite here sending non-www traffic to www. I just checked, and I can go to the non-www version of your site, which could cause all sorts of cookie problems.

Could you try uncommenting this line and putting it up top, right below Rewrite Engine On

The www redirect really should be your first rule. If that works, then we can integrate the HTTPS rule too. Let me know

Ok, changed it.