Forcing SSL by changing base url to https://

The Box API wants me to turn http:// into https://. I'm so damn close to figuring this out. The only problem - it works only sometimes. You can see what I mean in the attached grabs. You can also experience it live on If you visit the site you'll see a yellow lock in the address bar; but if you view the source, you'll see a green lock. I'm confused. Bluehost hosts my site.

I changed the protocol on line 6 in concrete/startup/url_check.php to "https://" and added the following lines to my config/site.php.

define('BASE_URL', ''); 
define('REDIRECT_TO_BASE_URL', false);

I've also implemented the Force SSL add-on. Sometimes it works, sometimes it doesn't, regardless of whether the user is signed into the site.

Any ideas? Thanks up front.


P.S. These posts helped me out:

2 Attachments

View Replies: View Best Answer