My whole site is over http, but I'm obliged to submit personal data from a form via https. How do I do that with Webform?

Comments

quicksketch’s picture

The most common approach is using .htaccess to redirect from HTTP to HTTPS on certain paths. You can also try http://drupal.org/project/securepages. And there's a patch at #1407740: Add an option to enable $form['#https'] to force Webform to use HTTPS on a specific form. Though importantly, none of these solutions actually "provide HTTPS", you have to configure your webserver to handle https requests or work with your hosting company to enable such functionality.

liam morland’s picture

If the data needs to be secure, then the form needs to be served over HTTPS as well as having the data submitted securely. If a form is served over HTTP, then it can be changed by an attacker before it gets to the user, thereby defeating any security. I used hook_form_alter() to redirect every request for a page containing a form to HTTPS.

quicksketch’s picture

Status: Active » Closed (fixed)

Closing after lack of activity.

everkuil’s picture

Hello Liam,

I'm interested in your solution.
I would like to redirect the request for my webforms to HTTPS.
Can you please explain how you used hook_form_alter() to redirect every request for a page containing a form to HTTPS.

Looking forward for your answer.

Erik