I currently have a site where I am using .htaccess to turn https on for certain sections of the site:
RewriteCond %{HTTPS} off
RewriteCond %{REQUEST_URI} (evaluate/purchase*)
RewriteRule (.*) https://mydomain.com%{REQUEST_URI}
There are several files starting with "purchase" that reside in the "evaluate" folder, and all of those need to be protected. So far, this works.
I now need to protect several other files and directories, however adding them as a rewrite condition doesn't seem to work:
RewriteCond %{HTTPS} off
RewriteCond %{REQUEST_URI} (evaluate/purchase*)
RewriteCond %{REQUEST_URI} (another_dir/file.php)
RewriteCond %{REQUEST_URI} (please_secure_me.php)
RewriteRule (.*) https://mydomain.com%{REQUEST_URI}
This isn't kicking up any 500's or anything, it just will only protect the files in the first condition. What am I doing wrong?