• Global community
    • Language:
      • Deutsch
      • English
      • Español
      • Français
      • Português
  • 日本語コミュニティ
    Dedicated community for Japanese speakers
  • 한국 커뮤니티
    Dedicated community for Korean speakers
Exit
0

form is not secure and autofill is turned off

New Here ,
Sep 16, 2022 Sep 16, 2022

Copy link to clipboard

Copied

form is not secure and autofill is turned off.. only in crome??? Fix??

 

Views

1.4K

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Expert ,
Sep 17, 2022 Sep 17, 2022

Copy link to clipboard

Copied

Don't use crome

Wappler, the only real Dreamweaver alternative.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
LEGEND ,
Sep 25, 2022 Sep 25, 2022

Copy link to clipboard

Copied

As a Community expert this is not really called for. You should at least provide some context if you do not recomend chrome, suggest others for example like Brave and explain to the person asking for help.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Expert ,
Sep 25, 2022 Sep 25, 2022

Copy link to clipboard

Copied

@Liam Dilley 

Well the OP said, it only happens in crome [sic].  😁

 

PATIENT: Doctor, doctor, it hurts when I do this...

DOCTOR: Then stop doing that.

 

Nancy O'Shea— Product User, Community Expert & Moderator

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Expert ,
Sep 17, 2022 Sep 17, 2022

Copy link to clipboard

Copied

Why is your form not secure? Are you missing an SSL certificate? Contact your host.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
New Here ,
Sep 18, 2022 Sep 18, 2022

Copy link to clipboard

Copied

yes i have ssl cert

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Expert ,
Sep 17, 2022 Sep 17, 2022

Copy link to clipboard

Copied

What's the URL to your site where you're seeing this problem?

 

Nancy O'Shea— Product User, Community Expert & Moderator

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
New Here ,
Sep 18, 2022 Sep 18, 2022

Copy link to clipboard

Copied

fundstome.com

I have ssl cert

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Expert ,
Sep 19, 2022 Sep 19, 2022

Copy link to clipboard

Copied

As others have you said, your form is not secure. DO NOT USE.

It's irresponsible to transmit sensitive data by email and expect it to be protected.

 

If you can't code, and I suspect you can't, use a secure form from a 3rd party service like Wufoo or JotForm.

https://www.wufoo.com/

https://www.jotform.com/

 

Nancy O'Shea— Product User, Community Expert & Moderator

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Expert ,
Sep 19, 2022 Sep 19, 2022

Copy link to clipboard

Copied

I must also mention that if you collect data from people, you need a written privacy policy statement on your website.  You must explain what data is collected, how it is used.  If you share data, how is that data used by 3rd parties.  Other regional and business laws may apply.  Please consult your legal expert for more details.

 

Nancy O'Shea— Product User, Community Expert & Moderator

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
LEGEND ,
Sep 25, 2022 Sep 25, 2022

Copy link to clipboard

Copied

Rules and regulations differ per country of operation as a note.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Expert ,
Sep 25, 2022 Sep 25, 2022

Copy link to clipboard

Copied

Not talking about rules and regulations. Talking about security.

 

For starters, this is a spam bot's breakfast, lunch and dinner.

<p><a href="mailto:info@fundstome.com">Info@fundstoyou.com</a><br>

 

Secondly, name me an email protocol that cannot be intercepted. As one blogger puts it:

Email might feel like a private, one-to-one conversation safe from prying eyes, but email is about as confidential as whispering at the White House. Your messages can be intercepted and read anywhere in transit, or reconstructed and read off of backup devices, for a potentially infinite period of time.

Wappler, the only real Dreamweaver alternative.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Expert ,
Sep 18, 2022 Sep 18, 2022

Copy link to clipboard

Copied

You are asking people to email personal details. This is most irresponsible. Thank goodness for Chrome for pointing this out.

 

It angers me, the fact that cowboys are allowed to develop websites with this type of insecurity.

 

The only way to handle personal information is to process the form on a secure server. 

Wappler, the only real Dreamweaver alternative.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Expert ,
Sep 19, 2022 Sep 19, 2022

Copy link to clipboard

Copied

quote

You are asking people to email personal details. This is most irresponsible. Thank goodness for Chrome for pointing this out.

 

It angers me, the fact that cowboys are allowed to develop websites with this type of insecurity.

 

The only way to handle personal information is to process the form on a secure server. 


By @BenPleysier

 

That's actually a really cool feature. I wish all browsers had this.  

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
LEGEND ,
Sep 25, 2022 Sep 25, 2022

Copy link to clipboard

Copied

This is really nonsensical. Of course you can do this and of course it is not irresponsible.


In terms of the site and business - They will not get it, it is obvious but if its been setup, it has secure or someone has a site repitable and has a service then there is no problem filling in forms with personal details.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Expert ,
Sep 25, 2022 Sep 25, 2022

Copy link to clipboard

Copied

quote

there is no problem filling in forms with personal details.


By @Liam Dilley

 

Correct, but do not use an email to convey those personal details.

Wappler, the only real Dreamweaver alternative.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
LEGEND ,
Sep 19, 2022 Sep 19, 2022

Copy link to clipboard

Copied

 

 


@Sniperssite wrote:

form is not secure and autofill is turned off.. only in crome??? Fix??

 



This is to do with trying to process your form in an unsecure way by using an email address in the forms 'action' field - 'mailto:https://XnfX@fXndXtoXe.Xom'  (Ive X'd the email to stop spam)

 

You should use a server side process such as php/node to process the form. 

 

It looks like your actual website is protected by a SSL certificate.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Expert ,
Sep 19, 2022 Sep 19, 2022

Copy link to clipboard

Copied

quote

It looks like your actual website is protected by a SSL certificate.


By @osgood_

========

Protected is a relative term.  How much encryption and insurance does one get from a zero-cost, 90-day ACME certificate?  I mean something is better than nothing.  But I wouldn't run a business on this.

 

Nancy O'Shea— Product User, Community Expert & Moderator

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
LEGEND ,
Sep 20, 2022 Sep 20, 2022

Copy link to clipboard

Copied

quote
quote

It looks like your actual website is protected by a SSL certificate.


By @osgood_

========

Protected is a relative term.  How much encryption and insurance does one get from a zero-cost, 90-day ACME certificate?  I mean something is better than nothing.  But I wouldn't run a business on this.

 


By @Nancy OShea

 

There is nothing wrong with free certificates for websites which just request general information such as name, email, enquiry. 

 

If its more sensitive information such as medical records anything to do with finance etc then one should invest in an upgrade SSL certificate.

 

Personally l think the need for a SSL certificate for low grade information is bonkers anyway. We all share that kind of information liberally anyway in profile's and directories which can be found all over the Internet.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
LEGEND ,
Sep 25, 2022 Sep 25, 2022

Copy link to clipboard

Copied

LetsEncrpt for example is 100%. To say a free or zero cost is not as valid as a $100 a month one purely on the price is not a valid statement to make. Reputation, actual features and other factors are actual important things.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Expert ,
Sep 27, 2022 Sep 27, 2022

Copy link to clipboard

Copied

LATEST

Tell that to my bank and they will laugh at you.  Just saying.... 

 

My merchant bank performs PCI compliance checks every 3 months.  If my site doesn't pass, I don't get paid.  Simple as that. 

 

If you're not a merchant, zero cost ACME certs that provide no insurance and only low-level encryption are probably "good enough."  But real business owners know that that "good enough" is not good enough for the banking industry.

 

I don't pay a lot for multiple certs.  I think it works out to about $20/year per domain, more if you only buy certs for 1 year at a time. 

 

There are deals to be had from Namecheap.com and other brokers.  If you buy certs from your hosting provider, be prepared to pay much more.  Hosts charge higher prices because they can, not because they should. 

 

Nancy O'Shea— Product User, Community Expert & Moderator

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
LEGEND ,
Sep 25, 2022 Sep 25, 2022

Copy link to clipboard

Copied

Firstly I have to say I am sorry for the comments here and especially from some Adobe Profesionals. The comments have been quite attacking on the site and what your doing and while your initial post was way too short after you posted your link I do not think many of the comments are called for.

In terms of providing actual information for you while outside of the DW thread base but valid web based....

 

Chrome introduced the feature to help protect users and the warning for sites and forms was forced in October of last year. It can be for many reasons - NOT JUST FOR what people have said here and you can google a list of those.

You have an SSL but the form post action is not set correctly. Mailto needs an email and sending that information from a form via email has 2 main problems.

1. Security

2. Size - You would not recieve all emails due to the attachments.

 

Trying to start a new business or step into the web to expand a business is challenging and initially costly. In saying that though the site will not attract many people or entice anyone to fill in those forms regardless of the security. It does not look like a modern website, inviting or something people would trust.
You should look to use a form service or save to server securly or just something like JotForms to get that data sent and stored safely.
Check with what legal requirements for your business and country in terms of what you are doing to ensure you have things like privacy policies and data safety all in place.
But there are many website building tools and services you can use that are low cost that would give you SSL's, secure forms and a more enticing website so it is worth looking into those.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines
Community Expert ,
Sep 25, 2022 Sep 25, 2022

Copy link to clipboard

Copied

quote

Firstly I have to say I am sorry for the comments here and especially from some Adobe Profesionals. The comments have been quite attacking on the site and what your doing and while your initial post was way too short after you posted your link I do not think many of the comments are called for.

In terms of providing actual information for you while outside of the DW thread base but valid web based....

 

Chrome introduced the feature to help protect users and the warning for sites and forms was forced in October of last year. It can be for many reasons - NOT JUST FOR what people have said here and you can google a list of those.

You have an SSL but the form post action is not set correctly. Mailto needs an email and sending that information from a form via email has 2 main problems.

1. Security

2. Size - You would not recieve all emails due to the attachments.

 

Trying to start a new business or step into the web to expand a business is challenging and initially costly. In saying that though the site will not attract many people or entice anyone to fill in those forms regardless of the security. It does not look like a modern website, inviting or something people would trust.
You should look to use a form service or save to server securly or just something like JotForms to get that data sent and stored safely.
Check with what legal requirements for your business and country in terms of what you are doing to ensure you have things like privacy policies and data safety all in place.
But there are many website building tools and services you can use that are low cost that would give you SSL's, secure forms and a more enticing website so it is worth looking into those.


By @Liam Dilley

 

What is different to what you are saying here and what I have been saying regarding emailing personal informattion. I do not apologise for making the statement under the name of security. At least I did not criticise the website.

Wappler, the only real Dreamweaver alternative.

Votes

Translate

Translate

Report

Report
Community guidelines
Be kind and respectful, give credit to the original source of content, and search for duplicates before posting. Learn more
community guidelines