In front of my Magento installation is a load balancer handling all the SSL stuff. If I don't tell Magento that it is receiving a secure connection it will go into a 302 redirect loop. The only solution I found so far is to patch the main index.php like so (code goes right above the Mage::run line at the bottom the index.php):

 * Prevent Magento from performing a 302 redirect loop.

    if ($_SERVER['HTTP_X_FORWARDED_PROTO'] == 'https') {
        $_SERVER['HTTPS'] = 'on';
        $_SERVER['SERVER_PORT'] = 443;

(I added the content from the blog post with the addition from a commenter here, in case the link goes dead).

How can I avoid to patch a core file?

1 Answer 1


Thanks to a tip on the #magento-de irc channel I found a much more elegant solution. Add these lines to the end of your .htaccess and it should be fine:

# Detect the Load-Balancer-Header and set the header magento expects
SetEnvIf X-Forwarded-Proto https HTTPS=on

Go here for a longer explanation.

  • DUDE. This solution fixed my problem!!! Thank you sooo much
    – kevando
    Commented May 4, 2015 at 21:19
  • Same here, this solved my issue.
    – David Tay
    Commented May 28, 2016 at 13:25
  • worked for me too
    – Darryl
    Commented Jul 10, 2016 at 22:13
  • After I used cloudflare to use free ssl, this solution helped fixing infinite loops issue. Commented Jan 11, 2017 at 23:10
  • 2
    nginx solution magento.stackexchange.com/questions/162392/…
    – david
    Commented Dec 11, 2017 at 1:43

Not the answer you're looking for? Browse other questions tagged or ask your own question.