How To Secure Contact_us Submission

[Guest]

Hiho

 

the title says it all... how can I secure the submission on the contact_us page?

 

It's no problem to call the contact_us.php via SSL, but if I click on the submit button, an unsafe connection will be established and my web browser warns me...

 

Hints anybody?

 

Greetings

[satish]

tep_href_link($page = '', $parameters = '', $connection = 'NONSSL')

 

pass the third parameter this way

(tep_href_link(FILENAME_LOGIN, '', 'SSL'))

 

 

replacing FILENAME_LOGIN with FILENAME_CONTACTUS where ever the calls are made to contact us.

As the default value is NONSSL.

 

else You need to modify html_output.php html function tep_href_link

 

 

Satish

 

Satish

[Guest]

Hm okay, this will establish an SSL connection to contact_us.php

 

but my problem is the submission button on this page... if I click on it, the connection which transfers the data will be unsafe.

[satish]

Well A SSL lock indicates that the submission will be safe till it reaches server.

 

 

Satish

[Guest]

Hmm.. .I still don't think so.

 

This happens, if I enter information and click on "submit":

 

 

:huh:

[Silverado05]

Do the same thing with the submit button as done above. On the sbmit or continue button what ever you use just put , '', 'SSL' after the file name like it is done below. It will secure the button to the next page. In this case the index page but once they navigate from the index page it will go to unsecure. You could change the button to after it submits to a thank you page or something.

 

<?php echo '<a href="' . tep_href_link(FILENAME_DEFAULT, '', 'SSL') . '">' . tep_image_button('button_continue.gif', IMAGE_BUTTON_CONTINUE) . '</a>'; ?>

[Guest]

Ha! After some trying and trying I finally managed it! :D

 

I added 'SSL' to those three lines in contact_us.php and now it works!

 

1. tep_redirect(tep_href_link(FILENAME_CONTACT_US, 'action=success', 'SSL'));

2. $breadcrumb->add(NAVBAR_TITLE, tep_href_link(FILENAME_CONTACT_US, '', 'SSL'));

3. <?php echo tep_draw_form('contact_us', tep_href_link(FILENAME_CONTACT_US, 'action=send', 'SSL')); ?>

 

Thank you for your inspiration! =)

[Silverado05]

Just curious, what files did you edit cause I have mine secured also but I don't like the way I have it. So would like to try another way and see if it is better.

[Guest]

I've had SSL encryption working on my shop before... I once set it up following the instructions of my webspace provider.

 

For the contact us form I modified the contact_us.php file and all other files which point to contact_us.php with tep_href_link(...)

 

 

I've put my stuff into a contribution:

http://www.oscommerce.com/community/contributions,5262

 

I hope it works for you ;)