I have a client that wants a contact form on their customer-oriented site. No problem. The site itself does not contain/retain any customer data. However, it’s entirely possible that a customer could enter an account number or other personal information inadvertently in a contact form. So they would like to have the form submission be secure.
Does anyone have ideas on how to accomplish this beyond setting everything up on a secure/SSL connection? Is that my only route to go?
Thanks in advance...
mconsidine
I would tend to say yes. Anything that they enter in a form is plain text. When they click submit, this plain text could be intercepted during the journey from the user to the server. So SSL would be the way to go, IMHO.
There’s a Server Type in admin that purportedly allows you to choose between an HTTP and an HTTPS connection. However, despite having experimented with it, I couldn’t see any effect at all. I also recall seeing people asking about that on the forum, but don’t remember seeing any answers.
So anything I’ve done for SSL with MODx has mainly been via .htaccess changes, and of course setup of the certificate on the server and all that it entails, stuff that your host tech support may be able to help you do.
Cheers, Dave
