Web Wiz - Green Windows Web Hosting

  New Posts New Posts RSS Feed - HTTPS
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

HTTPS

 Post Reply Post Reply
Author
stan_18830 View Drop Down
Newbie
Newbie


Joined: 17 September 2008
Status: Offline
Points: 3
Post Options Post Options   Thanks (0) Thanks(0)   Quote stan_18830 Quote  Post ReplyReply Direct Link To This Post Topic: HTTPS
    Posted: 17 September 2008 at 4:42pm
Is there a way to set the login form "Action" reference so that it uses HTTPS instead of HTTP?   Right now our forum members are sending their passwords in clear-text.

  
Back to Top
WebWiz-Bruce View Drop Down
Admin Group
Admin Group
Avatar
Web Wiz Developer

Joined: 03 September 2001
Location: Bournemouth
Status: Offline
Points: 9844
Post Options Post Options   Thanks (0) Thanks(0)   Quote WebWiz-Bruce Quote  Post ReplyReply Direct Link To This Post Posted: 17 September 2008 at 5:02pm
If you setup your site to use SSL (HTTPS) to connect to it then the whole forum will run under SSL.

You would just disable in IIS the use of HTTP and force everyone to use HTTPS to connect to your forum. You would also need to update any links to your forum and the forum path form within the admin area.


Edited by WebWiz-Bruce - 13 May 2024 at 12:54pm
Back to Top
stan_18830 View Drop Down
Newbie
Newbie


Joined: 17 September 2008
Status: Offline
Points: 3
Post Options Post Options   Thanks (0) Thanks(0)   Quote stan_18830 Quote  Post ReplyReply Direct Link To This Post Posted: 02 October 2008 at 2:43pm
Thanks BBcodes,

That was my initial approach, (I used the servervariables object to redirect from HTTP to HTTPS).  But this opened me up to having to review and alter all of the content components (img and such).  

Because our forum resides on a server that also transacts Payment Card Industry (PCI) business we are required to encrypt all login screens.   I'm sure that, with enough arguing, I can prove that this form, in no way, opens our PCI data or transactions to additional risk but this would have to be done each time our system is audited and would always invite questions.   I would much prefer that the login form have an SSL option in the first place.

Stan
Back to Top
 Post Reply Post Reply

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 12.08
Copyright ©2001-2026 Web Wiz Ltd.


Become a Fan on Facebook Follow us on X Connect with us on LinkedIn Web Wiz Blogs
About Web Wiz | Contact Web Wiz | Terms & Conditions | Cookies | Privacy Notice

Web Wiz is the trading name of Web Wiz Ltd. Company registration No. 05977755. Registered in England and Wales.
Registered office: Web Wiz Ltd, Unit 18, The Glenmore Centre, Fancy Road, Poole, Dorset, BH12 4FB, UK.

Prices exclude VAT at 20% unless otherwise stated. VAT No. GB988999105 - $, € prices shown as a guideline only.

Copyright ©2001-2026 Web Wiz Ltd. All rights reserved.