This forum is no longer open and is for reading/searching only.
Please use our new MachForm Community Forum instead.
MachForm Community Forums » MachForm 3
SSL Issues
Started 12 years ago by JamesHeathcote | 17 posts |
-
Dear all
I originally installed machform on a normal http web server, since then PCI DSS have complained our forms are not secure, we have since purchased an SSL Certificate and installed on our web server.
We have the issue that the pages of our site are secured, marked with a padlock and confirmed in page properties, but when linking to popup forms using the code from the admin panel, the pages start encrypted on page 1 (but complain about insecure content) then when you click next, the URL goes to http, but remains secure in properties and on the subsequent pages are totally insecure.
I had ammended the URL for our site to https in the admin centre, and updated page links in the popup HTML to https but this does not fix the issue.
Can I uninstall and reinstall the forms with the correct URL from the start reusing my 5 forms created?
We use captcha and I wondered if you had a secure captcha page too?
Posted 12 years ago # -
yuniar
Hi James,
No need to do re-install.
Just make sure to get the new form code which uses the HTTPS address. You can login to your MachForm using HTTPS to get the correct form code.
Also, if you are using custom logo or any images within the form, make sure it point to the https url.
If the problem persist, can you let me know the URL to the page where you embed the form please?I'll check it.
MachForm Founder
Posted 12 years ago # -
The updated code sent to me fixed the problem, a massive thank you.
Posted 12 years ago # -
Yuniar,
I also need to make my login HTTPS - What code do I need to change?
Please email to josh.pello@yahoo.com
Posted 12 years ago # -
jpello, you don't need to change any code... just go to your admin panel with https instead of http. Machform works with SSL out-of-the-box. You then need to change your hyperlinks to use https when linking to the form, instead of the normal http.
Also, if you have changed your .htaccess file on your webserver to auto redirect to https from http, then just use the format of //www.abc.com for your links instead of http://www.abc.com or https://www.abc.com. Using just the //www. will redirect using the proper protocol you set in your .htaccess file.
Posted 12 years ago # -
Have you purchased a SSL certificate from your web host?
Posted 12 years ago # -
If I go to the MachForm Panel, I get the lock showing it is secure, but when I go to the form, the lock flashes up and then it is gone...
any ideas why?
Clarence
Posted 11 years ago # -
yuniar
Are you using custom logo or any other images within the form? Make sure they all are using "https" path as well.
MachForm Founder
Posted 11 years ago # -
Some browsers will give you a warning about a page containing secure and insecure content, for the reason above - if you have a logo using an absolute URL
http://www.mysite.com/img/logo.jpg, this could be easily overlooked and should be changed tohttps://www.yoursite.com/img/logo.jpgPosted 11 years ago # -
Even better... let the browser (and the .htaccess) choose for you by using: //www.yoursite.com/img/logo.jpg
That way, whatever you force in your .htaccess (or don't force) will follow suit and never cause issues.
For example, I have my ,htaccess setup so anyone that browses to the page will automatically be shifted to a https version. Everything on my server is also addressed using https because i didn't signify it to be http or https, I used the aforementioned manner. Now, if I have specific portions of the site that uses http (not secure) or if I decide to change any portion of the site to https or whatever in the future, all data will automatically follow suit.
Posted 11 years ago # -
But how do I get the theme editor to link using https? I assumed if I logged into manage_forms using https and created a theme uploading a custom logo it would automatically link to it via https if a user subsequently goes to my form under https - but that doesn't seem to be happening.
My users get the browser warning:Mixed Content: The page at 'https://mysite.net/mform/view.php?id=12345' was loaded over HTTPS, but requested an insecure image 'http://mysite.net/mform/data/themes/images/img_f2469c3c6fd5fc1f21a28c98010b6db7-my_logo.png'. This content should also be served over HTTPS.
The same applies even if I just use one of the patterned backgrounds that are not custom but the machform ones.
Am I missing something obvious or is the only way to change the .htaccess so users can never access via http?Posted 9 years ago # -
Try going to "Settings > Miscellaneous Settings > advanced options" and change the MachForm URL from http://mysite.net/mform/ to https://mysite.net/mform/
Posted 9 years ago # -
@Steve1951 - Many Thanks. That did the trick. I'd forgotten that setting existed.
Posted 9 years ago # -
Thanks. This helped me. My logo image still had http. Easy fix!
Posted 9 years ago # -
Dear sir,
I also have a SSL issue.
When i look it up in the Chrome browser ( inspect element / console ) i get the message :Mixed Content: The page at 'https://www.ontbijtservice-noorderland.nl/machform/view.php?id=10638%22%20t…=%22Bestel%20hier%20uw%20ontbijt%22%3EBestel%20hier%20uw%20ontbijt%3C/a%3E' was loaded over HTTPS, but requested an insecure image 'http://www.ontbijtservice-noorderland.nl/machform/images/form_resources/grey-mild.png'. This content should also be served over HTTPS.
jquery.min.js:2 Mixed Content: The page at 'https://www.ontbijtservice-noorderland.nl/machform/view.php?id=10638%22%20t…=%22Bestel%20hier%20uw%20ontbijt%22%3EBestel%20hier%20uw%20ontbijt%3C/a%3E' was loaded over HTTPS, but requested an insecure image 'http://www.ontbijtservice-noorderland.nl/machform/images/form_resources/machform.png'. This content should also be served over HTTPS.I'm not using a custom logo or any other images within the form.
How and where can i change that.
I have already try Settings > Miscellaneous Settings > advanced options" and change the MachForm URL from http://mysite.net/mform/ to https://mysite.net/mform/Posted 9 years ago # -
Thanks to the customer service the issue is solved. I used another theme. I set it back to the default theme and the SSL problem is gone.
Posted 9 years ago #
Reply
You must log in to post.