http to https

CI 4 are declared stable, and are now on 4.0.2. With lots of development being done behind the scene.

Open up your /public/.htaccess and change Line 26

Code:

RewriteRule ^ https://%1%{REQUEST_URI} [R=301,L]

You will also need to change your app.baseURL to https:
https://codeigniter4.github.io/userguide...ion-set-up

I think you are referring to the following in the app/config/App.php. Personally I like to do all redirects on server level, as it will give you best performance. If it can't be done, an option have been provided, with said config.

Code:

public $forceGlobalSecureRequests = false;

If you want to add HSTS as CI4 does, you need to add the following to your .htaccess.
https://en.wikipedia.org/wiki/HTTP_Stric...t_Security

Code:

<IfModule mod_headers.c>
Header set Strict-Transport-Security "max-age=31536000;"
</IfModule>