<?php 
 
defined('C5_EXECUTE') or die("Access Denied.");
 
if (REDIRECT_TO_BASE_URL == true) {
   $protocol = 'https://';
   $base_url = BASE_URL;
   if (isset($_SERVER['HTTPS']) && ($_SERVER['HTTPS']) && ($base_url_ssl = BASE_URL_SSL)) {
      $protocol = 'https://';
      $base_url = $base_url_ssl;
   }
 
   $uri = $_SERVER['REQUEST_URI'];
   if (strpos($uri, '%7E') !== false) {
      $uri = str_replace('%7E', '~', $uri);
   }
 
   if (($base_url != $protocol . $_SERVER['HTTP_HOST']) && ($base_url . ':' . $_SERVER['SERVER_PORT'] != 'https://' . $_SERVER['HTTP_HOST'])) {
      header('HTTP/1.1 301 Moved Permanently');  
      header('Location: ' . $base_url . $uri);
      exit;
   }
 
}
 
 
 

 
<?php   defined('C5_EXECUTE') or die("Access Denied.");
 
/**
 * A model triggered by the on_before_render() event to check whether the page
 * should be rendered using https and redirect as necessary
 *
 * @package JBx Force SSL
 * @author Jon Bowes <[email protected]>
 * @category Model
 * @copyright  Copyright (c) 2010 JBxHosting Ltd. (http://www.jbxonline.net)
 * @license   http://www.jbxonline.net/license/...     MIT License
 *
 */
class JbxForceSsl {
 
    /**
    * Returns nothing.
    * Redirects if Force SSL conditions are met
    * @param $page automagically passed in by the on_before_render() event
    * @param $ssl  true if the site is currently using https
    *
    */
    public function checkssl($page, $ssl) {
 
        $pageObj = $page->getCollectionObject();
      $uri = $_SERVER['REQUEST_URI'];
 
        if (!$ssl && $pageObj->getAttribute('jbx_force_ssl')) {
 
            // We need to redirect to a secure url
            // If the BASE_SSL_URL definition is not set,
            // we build it based on the BASE_URL
            if (!defined(BASE_SSL_URL)) {
                $base_ssl_url = preg_replace([email protected]://@', 'https://', BASE_URL);
            } else {
                $base_ssl_url = BASE_SSL_URL;
            }
 
            // Perform a 301 redirect
            header('HTTP/1.1 301 Moved Permanently');
            header('Location: ' . $base_ssl_url . $uri);
            exit; // ensure no other code is executed
        }
 
        if ($ssl && !$pageObj->getAttribute('jbx_force_ssl')) {
 
            // We're still using https, but it isn't required here
            // Perform a 301 redirect to a non-secure protocol
            header('HTTP/1.1 301 Moved Permanently');
            header('Location: ' . BASE_URL . $uri);
            exit; // ensure no other code is executed
        }
 
 
    }
 
}