views:

40

answers:

0

Hey Guys,

I am using a Magento installation with the one step checkout plugin meanning I have very few pages that need https, I want to control https search indexing and user access by redirecting the whole https version of the site except of course for the secure checkout.

the secure checkout section is /onestepcheckout/ (and also includes some sub pages of that i.e onestepcheckout/failure)

This is what I have so far but the https is not kicking in on the checkout page with this code, the redirect works in all other case (i.e. I send index https to index http) just the exception that is broken

#Redirect HTTPS to HTTP except checkout 
RewriteCond %{HTTPS} on
RewriteCond %{REQUEST_URI} !^onestepcheckout
RewriteRule ^(.*)$ http://www.mysite.co.uk/$1 [R=301,L]

#Require SSL on checkout
RewriteCond %{HTTPS} !on
RewriteCond %{REQUEST_URI} ^onestepcheckout\/?$
RewriteRule ^(.*)$ https://www.mysite.co.uk/$1 [R=301,L]

I am also vaguely cautious that the /onestepcheckout/ does not contain secure resources and therefore an exception may need adding to images and style sheets etc?

Any suggestions would be a big help.