How do I force my whole site to use HTTPS?

Having a certificate installed is only half the job. To make sure every visitor is protected, you should force HTTPS so the browser always loads the secure https:// version of your pages.

The easiest way for most sites:

1. Log in to the DirhamHost control panel from my.dirhamaday.ae.
2. Open the Domains area and look for the Force HTTPS Redirect toggle next to your domain.
3. Switch it on. Visitors on http:// are now redirected automatically.

For WordPress, also set both the WordPress Address and Site Address under Settings → General to your https:// URL.

If you prefer to do it in code, add this to the top of your .htaccess file:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

Always confirm your certificate is valid first, otherwise forcing HTTPS will show errors. If you get a redirect loop after enabling this (common behind Cloudflare), contact WhatsApp +971 58 553 6767 or support@dirhamaday.ae and we will help set the correct SSL mode.