Following the recent Google announcements about [improved ranking for sites running on https][1] we have a number of clients asking about this. Is it safe to just 301 redirect all pages to their SSL equivalent, for example in a common PHP include file:

    if($_SERVER['HTTPS']!="on"){
        $redirect= "https://".$_SERVER['HTTP_HOST'].$_SERVER['REQUEST_URI'];
        header("Location:$redirect",true,301);
        exit();
    }

Obviously I'm aware this is also possible within a *.htaccess* file but that cannot be modified in our case.

Obviously all internal links would be switched to `https://` links but obviously we need to sort out incoming links from Google and elsewhere. 

Is this a sound approach? Are there any other gotchas to be aware of?


  [1]: http://googleonlinesecurity.blogspot.co.uk/2014/08/https-as-ranking-signal_6.html