Force SSL on All WordPress Login and Admin Sessions

⚡ Target: functions.php 🔒 Tested: WP 6.6+ / PHP 8.2+ 💻 Lang: PHP

PHP (functions.php)

if ( ! defined( 'FORCE_SSL_ADMIN' ) ) {
    define( 'FORCE_SSL_ADMIN', true );
}
add_action( 'login_init', function() {
    if ( ! is_ssl() && ! empty( $_SERVER['HTTP_HOST'] ) ) {
        wp_safe_redirect( 'https://' . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'], 301 );
        exit;
    }
} );

Enforces HTTPS encryption on all login forms and wp-admin administrative sessions to prevent session cookie interception on public networks.