$config['root_url'] = 'https://www.blah.com'; if(isset($_SERVER['HTTPS']) && $_SERVER['HTTPS']=='on') { $config['root_url'] = 'https://www.blah.com'; } That's really useful. The existing security Wiki article only talks about redirecting http://blah.com/admin to https://blah.com/admin, whic...