Wufoo Forums → Forums

"Unsecure content" issue

• sinoun May 2012 Permalink

  I'm pretty sure this is just a browser thing, but I'm curious and want to know for sure. I just got a client who said when his Wufoo contact form loads up, it prompts the user to choose whether they want to show unsecure content. Is there anyway that the form can be changed so it doesn't have that prompt? The concern is that some users may not want to go with the page as they might think there is a security issue.
  
  Is this just a browser thing or is there something I can do to the form to make it "secure"?
  
  Thanks in advance for your help!
  
  Sinoun
• sdunham May 2012 Permalink

  I think you need a certain level (or higher) paid plan to get SSL. My guess is that you have one of these levels, and the client is embedding their form in a unsecured. That would explain the mix of secured and unsecured content which the browser is complaining about.
  
  Either that, or they've embedded non-SSL content in their SSL-enabled form. Kinda hard to know for sure without more info...
• sinoun May 2012 Permalink

  Thanks for the reply! Here is the link to the form I'm talking about: http://moving-careers.com/contact/
  
  It's just a regular form that doesn't really need SSL. I would like to figure out why it's saying there is unsecured content.
• sdunham May 2012 Permalink

  Your custom CSS file (http://nuonis.com/wufoo/no-header.css) is hosted without SSL. The warning is because Wufoo is loading the rest of your form securely, but the CSS file is loaded using http. If you host it somewhere with SSL, and make the link https you shouldn't get this error anymore.
  
  Also, the form is trying to load what appears to be a background image (http://nuonis.com/wufoo/fieldbg.gif) of some sort, but getting a 404. If you decide to fix this, make sure to host the image in a secure location and change it to https to avoid the same warning.
  
  -Scott
• Andrew Gosnell May 2012 Permalink

  Google made a recent update to Chrome that gives warnings about non-ssl css files in an ssl page.
  
  So as Scott mentioned, you'd need to host the css file on a server with ssl enabled, and change the url to an https url in your form's theme.
  
  If it's a form where you don't need the SSL encryption, you can turn that off. We have instructions on how to do that here:
  http://wufoo.com/docs/url-modifications/#ssl
  
  Andrew
• sinoun June 2012 Permalink

  Ah, thank you so much Andrew!!! That trick in changing it to "false" is exactly what I needed.
  
  Thank you both for your time and help! :)