Answers.Body: <p>Got it working for the most part. Had to have an SSL backend-site as well as an SSL frontend.  Working now.</p>
  
Answers.ContentLicense: CC BY-SA 4.0
Answers.CreationDate: 2024-04-16T11:55:45.280Z
Answers.LastActivityDate: 2024-04-16T11:55:45.280Z
Answers.UserDisplayName: Larry G. Wapnitsky
Body: <p>I have CiviCRM running behind haproxy with a verified SSL connection. Whenever I submit forms in the CiviCRM interface, I'm told that the forms are insecure. I have verified that my https settings match any other sites that I'm using behind the same cert, and none of those have any issues.</p>
  <p>If I enable the SSL settings in CiviCRM I then lose access to my site and have to go manually edit the settings.php file</p>
  <p>EDIT:<a href="https://i.sstatic.net/jEibf.jpg" rel="nofollow noreferrer"><img src="https://i.sstatic.net/jEibf.jpg" alt="enter image description here" /></a>
  I've attached a screenshot. As you can see (at the bottom), I'm accessing my code securely, but, if you look at the code, the submit/cancel buttons reference an insecure (http) connection</p>
  <p>EDIT 2: I'm running on Joomla</p>
  
Comments.ContentLicense: CC BY-SA 4.0
Comments.CreationDate: 2024-04-12T11:42:43.953Z
Comments.Text: Have you checked in `civicrm.settings.php` that your `CIVICRM_UF_BASEURL` setting is showing **https** ?
Comments.UserDisplayName: Aidan
Comments.ContentLicense: CC BY-SA 4.0
Comments.CreationDate: 2024-04-12T13:47:56.673Z
Comments.Text: Yes. Verified as https
Comments.UserDisplayName: Larry G. Wapnitsky
Tags: <joomla><forms><security>
Title: Insecure form submission
ThreadText: # Insecure form submission
  
  (Asked by: username_0 on 2024-04-11)
  
  I have CiviCRM running behind haproxy with a verified SSL connection. Whenever I submit forms in the CiviCRM interface, I'm told that the forms are insecure. I have verified that my https settings match any other sites that I'm using behind the same cert, and none of those have any issues.
  
  If I enable the SSL settings in CiviCRM I then lose access to my site and have to go manually edit the settings.php file
  
  EDIT:[![enter image description here](https://i.sstatic.net/jEibf.jpg)](https://i.sstatic.net/jEibf.jpg)
  I've attached a screenshot. As you can see (at the bottom), I'm accessing my code securely, but, if you look at the code, the submit/cancel buttons reference an insecure (http) connection
  
  EDIT 2: I'm running on Joomla
  
  **Tags:** joomla, forms, security
  
  > **Comments:**
  > **username_1**: Have you checked in `civicrm.settings.php` that your `CIVICRM_UF_BASEURL` setting is showing **https** ?  
  > **username_0**: Yes. Verified as https  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_0 on 2024-04-16. Score: 1
  
  Got it working for the most part. Had to have an SSL backend-site as well as an SSL frontend. Working now.
  
  
  ---
  
  