Stuck on form mailer

[pm3009]

I have a website that I created with Frontpage 2003 and I purchased a
SSL Certificate. I found that the Frontpage forms weren't supported
with the SSL. I asked my Hosting company (godaddy) if they would
install extensions on port 443, but they said that they couldn't, so
they pointed me to directions on how to point to their gdform.php,
which I did. The form now works on the secure page, and I receive the
email with the data input, but, once I click on the Submit button, I
receive the error.... "You are about to be redirected to a connection
that is not secure...... "

I changed the redirect for the confirmation page from:
<input type="hidden" name="redirect" value="thankyou.html" />

to the following....

<input type="hidden" name="redirect"
value="https://www.mywebsite.com/thankyou.html" />

but then I get the "Ooops, Page not found error".

I realized with redirect line above, is actually redirecting to the
following URL which is why I'm seeing the "Oops, Page not found error".
http://www.mywebsite.com/https://www.mywebsite.com/thankyou.html
(notice the string of two urls together...one http, and the other
https)

If I remove the redirect command for the confirmation page completely,
I still get the "You are about to be redirected to a connection that is
not secure...... " error.

What would be the correct redirect line, to redirect people to the
secure thankyou page so that they don't get the "You are about to be
redirected to a connection that is not secure...." error ?

The line I tried below, is obviously not giving the correct results.
<input type="hidden" name="redirect"
value="https://www.mywebsite.com/thankyou.html" />

The post command I am using is:
<form action="https://www.mywebsite.com/gdform.php" method="POST">


Thank you for any help you can give me.
Pam

 

[Andrew Murray]

Since you're not using the FP form handler (as you said you're using
Godaddy's form processor), it is a good idea to ask them about it.

It is not a Frontpage issue, but I don't really see the harm in having the
confirmation page appear on the non-secure http: rather than https:.

Is the information sent from the form of such a sensitive or confidential
nature that you need the SSL connection?

 

[Ronx]

If the form needs SSL, then the results should not be emailed, unless the
email is also encrypted.

 

[pm3009]

Hi Andrew

I did ask Godaddy about it, but they said they can't help with
troubleshooting the code.
This is for an online application for a mortgage company, so I do need
a secure connection since the SS# is requested etc. My concern about
the message saying they are being redirected to a non-secure page, is
that they may think the whole website isn't secure.

Thanks!
Pam

 

[Thomas A. Rowe]

Then you will need to switch to a web host that is willing to support you.

--
==============================================
Thomas A. Rowe
Microsoft MVP - FrontPage
==============================================
Agents Real Estate Listing Network
http://www.NReal.com
==============================================

 

[pm3009]

Hi Ron

Rather than sending my results from the secure form to email, which
isn't secure, could I send the results to a file in the _private folder
on the server that hosts my website? Would that be 100% secure? What
type of file would I have to save the results to? I tried a .txt and
a .html and both resulted in an error when submitting the info in the
secure form.

Thanks!
Pam

 

[Ronx]

Unless the FP extensions are installed on Port 443 and you can use a
FrontPage form to process the data, storing data in the _private folder
will be a hassle with permissions. IMO, the _private folder is not 100%
secure anyway - I had a server where a script on another domain (hosted on
the same server) could read the files in _private, even though they were
protected from casual browsers.

A password protected MSSQL database, or MySQL database, is the best way to
go. Access database is not, IMO, sufficiently secure unless it is located
outside your website. If you are collecting credit card information, your
credit card processor may not allow the card info to be stored anyway, and
they definitely will not allow email.

 

[pm3009]

Thanks for explaining it to me Ron. There isn't any credit card
information involved, but the big concern is a Social Security number
is requested. For now, I removed the request for a Social Security
number from the online application (it's for a mortgage application).
GoDaddy already told me they can't install FP extensions on port 443.

Thanks again. Pam