ya da ssl varsa

if ((strpos($_SERVER['HTTP_HOST'], 'www.') === false))
{
header('Location: https://www.'.$_SERVER["HTTP_HOST"] . $_SERVER["REQUEST_URI"]);
exit();
}