title: HTTPS Force Redirect not working in Wordpress
body: <p>My Wordpress directory is at www.example.com/blog</p>
  
  <p>I recently changed my entire site to force HTTPS. So my .htaccess file in /blog/ looks like this:</p>
  
  <pre><code>&lt;IfModule mod_rewrite.c&gt;
  RewriteEngine On
  RewriteBase /blog/
  RewriteRule ^index\.php$ - [L]
  RewriteCond %{REQUEST_FILENAME} !-f
  RewriteCond %{REQUEST_FILENAME} !-d
  RewriteRule . /blog/index.php [L]
  &lt;/IfModule&gt;
  
  RewriteEngine on
  RewriteCond %{HTTPS} off
  RewriteRule (.*) https://%{HTTP_HOST}%{REQUEST_URI}
  </code></pre>
  
  <p>I also changed the site URL in Wordpress settings to be HTTPS.</p>
  
  <p>This works perfectly in the homepage, but in any post pages, the end user is able to change to non-secure HTTP, by changing the URL and pressing enter.</p>
  
  <p>For example, they can type directly: <a href="http://www.example.com/blog/post-1/" rel="nofollow noreferrer">http://www.example.com/blog/post-1/</a> and it will load as HTTP.</p>
  
  <p>What is wrong with my .htaccess file? Where is the loose end?</p>