[WordPress - Force SSL Without a Plugin] #wordpress #core #force #ssl

wp-force-ssl-programmatically.md

in .htaccess, right before the # END WordPress line

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^/?(.*) https://%{SERVER_NAME}/$1 [R,L]

in wp-config.php

define( 'WP_SITEURL', 'https://' . $_SERVER['HTTP_HOST'] );
define( 'WP_HOME', 'https://' . $_SERVER['HTTP_HOST'] );
define('FORCE_SSL_ADMIN', true);
define('FORCE_SSL_LOGIN', true);