SSL Certificate, HTTPS Redirect, and Cloudflare Setup

Enforcing SSL/TLS encryption ensures all user logins, payment proof submissions, and download tokens are protected against eavesdropping.

1. Install Free SSL Certificate

• In cPanel, open SSL/TLS Status and run AutoSSL (Free Sectigo / Let's Encrypt).
• Wait 2-5 minutes until all domain records display green padlock icons.

2. Automatic HTTPS Redirect (.htaccess)

Add these rules to the very top of your .htaccess file to automatically redirect all HTTP traffic to HTTPS:

RewriteEngine On
RewriteCond %{HTTPS} off
RewriteRule ^(.*)$ https://%{HTTP_HOST}%{REQUEST_URI} [L,R=301]

3. Cloudflare Configuration Tips

If using Cloudflare DNS:

• Set Cloudflare SSL/TLS encryption mode to Full or Full (Strict). Never leave it on "Flexible" as this causes infinite redirect loops.
• Enable Always Use HTTPS and Automatic HTTPS Rewrites in the Cloudflare Edge Certificates tab.
• Set Security Level to Medium or enable "Under Attack Mode" if encountering DDoS attempts.