{"id":2105,"date":"2026-05-15T09:12:24","date_gmt":"2026-05-15T06:12:24","guid":{"rendered":"https:\/\/allinonewpsettings.com\/blog\/?p=2105"},"modified":"2026-08-02T12:09:34","modified_gmt":"2026-08-02T12:09:34","slug":"www-and-non-www-redirect-rules-for-wordpress-htaccess","status":"publish","type":"post","link":"https:\/\/allinonewpsettings.com\/blog\/www-and-non-www-redirect-rules-for-wordpress-htaccess\/","title":{"rendered":"WWW and Non-WWW Redirect Rules for WordPress .htaccess"},"content":{"rendered":"

A hostname rule in .htaccess<\/code> can consolidate WWW and non-WWW URLs, but it cannot compensate for missing DNS or certificate coverage. If a CDN enforces the opposite choice, the two layers can send visitors back and forth.<\/p>\n

Choose the canonical hostname across WordPress and its integrations, make both names reachable, then match only the alternate host and redirect it once.<\/p>\n

\nTable of contents<\/strong><\/p>\n
    \n
  1. What it means<\/a><\/li>\n
  2. A realistic WordPress example<\/a><\/li>\n
  3. Why it matters and when to use it<\/a><\/li>\n
  4. A straightforward route for beginners<\/a><\/li>\n
  5. The advanced route<\/a><\/li>\n
  6. Risks, common mistakes, backup, and rollback<\/a><\/li>\n
  7. How AIOWS helps: AIOWS Htaccess Editor<\/a><\/li>\n
  8. Related AIOWS articles<\/a><\/li>\n
  9. Conclusion and recommended route<\/a><\/li>\n
  10. Official sources<\/a><\/li>\n<\/ol>\n<\/div>\n

    What it means<\/h2>\n

    A hostname canonicalization rule sends one host variant to the corresponding path on the chosen host. Both variants need DNS and TLS because the initial connection occurs before Apache returns a redirect.<\/p>\n

    The destination should be a fixed trusted hostname. Reflecting an arbitrary incoming Host header can create an open redirect or catch names that do not belong to the site.<\/p>\n

    A realistic WordPress example<\/h2>\n

    WordPress stores the WWW URL, while a CDN rule sends WWW to the apex and Apache sends the apex back to WWW. Sign-in and an OAuth callback cross hosts and fail.<\/p>\n

    The administrator removes the CDN conflict, adds certificate coverage for both names and updates the callback registration. The Apache rule now matches only the exact apex host and points directly to HTTPS WWW.<\/p>\n

    Why it matters and when to use it<\/h2>\n

    One hostname keeps canonical tags, cookies, caches, sitemaps and analytics consistent. The rule is useful when Apache is the designated owner and the canonical choice has already been made throughout the application.<\/p>\n

    Do not add it at the origin when an edge service already performs the same redirect correctly.<\/p>\n

    A straightforward route for beginners<\/h2>\n
      \n
    1. Select WWW or the apex as the canonical public hostname.<\/li>\n
    2. Verify DNS and certificates for both variants.<\/li>\n
    3. Align WordPress URLs, internal links and registered callbacks with the canonical name.<\/li>\n
    4. Remove any rule that enforces the opposite direction.<\/li>\n
    5. Add an exact alternate-host condition outside the WordPress markers.<\/li>\n
    6. Test HTTP and HTTPS, paths, queries, sign-in and transactions from both names.<\/li>\n<\/ol>\n

      The advanced route<\/h2>\n

      Trace the public and direct-origin routes to identify the responder at each hop. Account for trusted proxy headers and CDN caching before attributing a Location header to Apache.<\/p>\n

      Use a literal destination host, preserve the request path and required query string, and exclude unrelated aliases or staging names. Verify that noncanonical requests complete in one redirect.<\/p>\n

      Risks, common mistakes, backup, and rollback<\/h2>\n

      Missing certificate coverage fails before the redirect, while broad regular expressions can include attacker-supplied or administrative hostnames. Conflicting edge and origin rules commonly produce loops.<\/p>\n

      Back up WordPress, CDN and .htaccess<\/code> settings together. A rollback must restore a coherent hostname choice across all three, not just remove the last line edited.<\/p>\n

      \n

      How AIOWS helps:<\/p>\n

      AIOWS Htaccess Editor<\/h2>\n

      AIOWS Htaccess Editor can be used to review and maintain the Apache rule when hostname canonicalization belongs in the supported .htaccess<\/code> file. Keep the custom block separate from WordPress permalink markers.<\/p>\n

      Save the original file, use an exact host condition and confirm that the public response reaches the fixed destination directly. Test stateful WordPress flows as well as simple pages.<\/p>\n

      The editor does not create DNS records or certificates and cannot remove a conflicting CDN redirect. Resolve those dependencies in their own systems before relying on the Apache rule.<\/p>\n

      Explore AIOWS Htaccess Editor<\/a>Compare AIOWS plans<\/a><\/p>\n<\/section>\n

      Related AIOWS articles<\/h2>\n