Posted by wolfing1 on 01/08/07 14:54

Adrienne Boswell wrote:
> Gazing into my crystal ball I observed wolfing1@gmail.com writing in
> news:1168011011.050829.189330@42g2000cwt.googlegroups.com:
>
> >
> > Adrienne Boswell wrote:
> >> Gazing into my crystal ball I observed wolfing1@gmail.com writing in
> >> news:1167954110.463734.101660@38g2000cwa.googlegroups.com:
> >>
> >> >
> >> > Harlan Messinger wrote:
> >> >> wolfing1@gmail.com wrote:
> >> >> > Not sure if this question is related to HTML or if it's an ASP
> >> >> > thing, but when I post a form in a secure page to a nonsecure
> page,
> >> >> > the posted fields come in as blank (this doesn't happen from
> >> >> > nonsecure to secure). Is this something I can fix somehow? Or
> >> >> > should it happen? (I'm trying to use POST method for all my
> pages)
> >> >> >
> >> >>
> >> >> I don't know how you're doing this, but if you're relying on
> Session
> >> >> variables to persist data from one page to the next, you can't.
> >> >> http://www.example.com is a different website from
> >> >> https://www.example.com, and none of the pages on either of them
> >> >> knows about any data you've stored in Session on pages from the
> >> >> other.
> >> > No, I mean form fields. Like
> >> > Page 1 (secure):
> >> ><form name="bleh" method="post" action="/pages/test.asp">
> >> ><input type="text" name="emailaddress">
> >> ><input type="submit" ...>
> >> ></form>
> >> >
> >> > In test.asp the value of the field 'emailaddress' (as in
> >> > request.form("emailaddress")) is blank
> >> >
> >> >
> >>
> >> What happens if you do this on the page that is losing the data?
> >>
> >> <%
> >> For ix = 1 to Request.Form.Count
> >> field = Request.Form.Key(ix)
> >> InputValue = Request.Form.Item(ix)
> >> response.write field & " = " & InputValue & "<br />"
> >> Next
> >> %>
> >>
> > If I enter from a secure page, the field is blank. If I enter from a
> > nonsecure page, the field has the value entered.
> >
> >
>
> What is the value of the action attribute of the form element? You need
> to specify https there as well, eg:
>
> <form method="post" action="https://www.example.com/form.asp">
>
But the page I'm posting to is not secure.
Basically, the field and form are part of a page header which all my
pages share with a 'search' field. So, when someone enters a word here
and presses the 'go' button, the value is (or should be) posted to the
'search_results' page which does the searching and shows the results.
So, the callling page could be secure or not, and the action for the
form would be 'http:' since the "search results" page is not secure.
But what I found is that, when I do it from a non-secure page the field
goes fine, but when I do it from a secure page, the field goes blank.

[Back to original message]