Forum on SSL - making secure.

User 2396634 Photo


Registered User
12 posts

I am using a form that I crafted with your software on my SSL encrypted page. I only figured out one way to get the form to work on the page correctly, but unfortunately it is not really a secure way. The page is displayed in an iFrame of the html, but anyone would be able to access the form if they find the html address (by typing in: http://www.registeryourapp.com/Idea%20S … sion.html. This is a paid access site, so I want to hold off access of this form in anyway other than through the access to my page, but don't want a separate html file, want it to be part of my build in my graphics. Also this issue affects the SSL encryption validation on my page since it is not really secure. I am copying the code I used to make it work below, but would love ideas on how to implement this within my page (a Wordpress page) without access to the html. Maybe code to point to the php and code on my page instead of html or something.

Code I am using:

<center><script type="text/javascript">// <![CDATA[
document.write(unescape("%3Ciframe src=\"http://registeryourapp.com/Idea%20Submission/Idea%20Submission.html\" width=\"650\" height=\"2870\"allowtransparency=\"true\" scrolling=\"no\" frameborder=\"0\"%3E&lt;a href=\"Idea%20Submission.php\" title=\"Idea%20Submission\"&gt;Check out my CoffeeCup Form&lt;/a&gt;%3C/iframe%3E"));
// ]]></script></center><noscript>&amp;lt;iframe width="650" height="2870" style="border:none; background:transparent; overflow:hidden;" src="http://registeryourapp.com/Idea%20Submission/Idea%20Submission.html"&amp;gt;&amp;lt;br /&amp;gt; &amp;amp;lt;a href="Idea%20Submission.php" title="Idea%20Submission"&amp;amp;gt;Check&amp;lt;br /&amp;gt; out my CoffeeCup Form&amp;amp;lt;/a&amp;amp;gt;&amp;lt;br /&amp;gt; &amp;lt;/iframe&amp;gt;&amp;lt;br /&amp;gt;</noscript>


THANKS!
User 187934 Photo


Senior Advisor
20,193 posts

If it's a paid access put the code your using to protect the other pages at the top of your form.php and form.html pages to protect the pages and redirect unauthorized users to a page of your choice. I'm already doing this on a site I have.:)
I can't hear what I'm looking at.
It's easy to overlook something you're not looking for.

This is a site I built for my work.(RSD)
http://esmansgreenhouse.com
This is a site I built for use in my job.(HTML Editor)
https://pestlogbook.com
This is my personal site used for testing and as an easy way to share photos.(RLM imported to RSD)
https://ericrohloff.com
User 2396634 Photo


Registered User
12 posts

This might be a longshot, but I'm using a plugin called "S2 Member" to block access to pages to paid members...do you know how I would steal code from it to place it on the html and php page?

Thanks!
User 187934 Photo


Senior Advisor
20,193 posts

It might be this. That's a pretty bulky script but there again it's for WordPress.
http://www.s2member.com/codex/stable/so … oc_line_28
I can't hear what I'm looking at.
It's easy to overlook something you're not looking for.

This is a site I built for my work.(RSD)
http://esmansgreenhouse.com
This is a site I built for use in my job.(HTML Editor)
https://pestlogbook.com
This is my personal site used for testing and as an easy way to share photos.(RLM imported to RSD)
https://ericrohloff.com
User 2396634 Photo


Registered User
12 posts

THANK YOU! I'm such a newbie that I do have a few more questions if you happen to be able to help. I appreciate you looking it all up on the S2 site.

So should I use that from Line 28 all the way to the bottom? Do I just cut and paste it into the top of the PHP for the form.php? How does wordpress know to read the PHP in the HTML file?

-Brad
User 187934 Photo


Senior Advisor
20,193 posts

I'm not totally sure on what their using to redirect users if their not logged in. That script is huge. I looked it over pretty quickly and there should be a way to use their existing code at the top of your extra pages to protect them. Look closely at you existing pages. There should be some code in there that could be utilized. I would go ask your question on their forum.:)
http://www.s2member.com/forums/
Never mind I see you already did.:lol:
Edit: Found it.
http://www.s2member.com/kb/protecting-n … -s2member/
I can't hear what I'm looking at.
It's easy to overlook something you're not looking for.

This is a site I built for my work.(RSD)
http://esmansgreenhouse.com
This is a site I built for use in my job.(HTML Editor)
https://pestlogbook.com
This is my personal site used for testing and as an easy way to share photos.(RLM imported to RSD)
https://ericrohloff.com
User 2396634 Photo


Registered User
12 posts

You rock. Hoping for something from them, thought I should try both though. Thanks again.
User 187934 Photo


Senior Advisor
20,193 posts

This will make easy.
http://www.s2member.com/kb/protecting-n … -s2member/
If you can't set your server up to parse the html file types with PHP then try placing the protection code in an iframe coded into the page.
I can't hear what I'm looking at.
It's easy to overlook something you're not looking for.

This is a site I built for my work.(RSD)
http://esmansgreenhouse.com
This is a site I built for use in my job.(HTML Editor)
https://pestlogbook.com
This is my personal site used for testing and as an easy way to share photos.(RLM imported to RSD)
https://ericrohloff.com
User 2396634 Photo


Registered User
12 posts

I tried that (I think right) and it didn't seem to do anything. I may not be directing it right to the php file, but then wouldn't it error if it was not finding it? It doesn't say how to protect the html also.

Have something to add? We’d love to hear it!
You must have an account to participate. Please Sign In Here, then join the conversation.