Author Topic: Form is not secure HTTPS for form processing??  (Read 220 times)

favsbo

  • Newbie
  • *
  • Posts: 2
    • View Profile
Form is not secure HTTPS for form processing??
« on: March 07, 2021, 05:16:30 pm »
Testing the tournamententry.html page.  FYI my site is on a secure server (HTTPS).
Yet when I view the tournament entry page (in chrome/edge), it indicates THE FORM IS NOT SECURE. AUTOFILL HAS BEEN TURNED OFF.

And worse, when the bracket is submitted it warns:

The information youíre about to submit is not secure
Because this form is being submitted using a connection thatís not secure, your information will be visible to others.


I beleive it is due to this URL being used:   http://www.turbotourney.com/v2021/pickentry2021.asp

IS YOUR FORMS PROCESSOR NOT HOSTED ON A SECURE SERVER????
PLS ADVISE, I BELIEVE THIS WILL SCARE OFF MANY PEOPLE WANTING TO SUBMIT BRACKETS.

Share on Facebook Share on Twitter


Doug

  • Administrator
  • Hero Member
  • *****
  • Posts: 3795
    • View Profile
    • Turbo Tourney
Re: Form is not secure HTTPS for form processing??
« Reply #1 on: March 07, 2021, 05:43:10 pm »
The server does support https, however, all of the pages have always been intended to run only under http.  I am looking into updating this in the next version now that (mainly in Chrome) accessing sites over http will always show a Non-Secure warning on the page.  There was never any intention of sending sensitive information (credit cards, SSN, etc.) but understand this may confuse/scare some people.

In the meantime, you should be able edit your entry page and update the form URL to https and I suspect it will work as you want.  I'll see if I can make an update yet to the 2021 version for this but that might be a work around for you in the short term.  Let me know if that helps.

Doug

favsbo

  • Newbie
  • *
  • Posts: 2
    • View Profile
Re: Form is not secure HTTPS for form processing??
« Reply #2 on: March 07, 2021, 06:49:51 pm »
Thanks Doug!   I appreciate such a fast reply. 
So i changed the form's post URL to HTTPS and BINGO that did the trick. Thanks. I should have thought about trying that.

Question-  in what scenarios does that TournamentEntry.html file get uploaded (and therefore overwrite my edited version)?  I'll need to pay attention to that and do this all over again anytime that entry file gets updated and uploaded.

Pushing this out in an update this year would be great though.
thanks!

Doug

  • Administrator
  • Hero Member
  • *****
  • Posts: 3795
    • View Profile
    • Turbo Tourney
Re: Form is not secure HTTPS for form processing??
« Reply #3 on: March 07, 2021, 07:29:51 pm »
Yeah this one is completely on me, I should have thought ahead that this would be a bigger issue this year.  If you reach out to me at support@turbotourney.com I will get you an update that you can use that will have the change you need.  The entry page would only be updated when you post it after the pairings come out so not very often but if you want to test out an update I'm happy to work with you on that.  Just email me and we'll figure it out.