 |
Adding
the security feature to your forms is optional and free. Your
visitors' form submissions will then be protected by 128-bit,
4-tier, SSL security. Accept orders, credit card information, and
other sensitive information via your secure contact forms on your
own website. There is, however, a limit of 15 secure form
submissions per day, which Allforms says "may be increased on
demand." You could also upgrade to the "Plus"
account, which is just $10 per year, and you will then be able to
accept unlimited secure form submissions. Allforms recommends that
you only use the secure forms when absolutely necessary, because
"performance wise, secure submissions
are slower than normal form submissions." To create a secure
form, in the first line of your form code, you need to replace
your form's action attribute from the normal URL:
http://free.allforms.mailjol.net/u/XXXXXXXX.php
to a secure URL (adding an "s" after http):
https://free.allforms.mailjol.net/u/XXXXXXXX.php
You can get the secure URL for your form by logging into your Form
Administration Panel at Allforms and clicking the SSL logo (lock
icon) near the normal form script address.
AllForms' 4-tier security system will encrypt
the form data to a very high level as soon as it arrives on the
server before storing it into the database. The data submitted via
your form will not be sent to your e-mail address, since
email is not secure. Instead, you will receive notification and a
link via email. Click on that link, log in, and view your secure
messages. This data will be stored on Allforms server for 30 days,
after which it will be deleted. You can view your data online
and/or download your data in either of two formats:
- Download as CSV (comma seperated values) in order to import data
into applications such as MS Excel.
- Download as PDF.
Two more restrictions for secure email forms:
1. (For advanced users) Only the POST method
is allowed for secure submissions, as data submitted through the
GET method can be hacked easily by URL tracing.
2. File upload (i.e. 'multipart/form-data' encoding) is not
supported through the secure forms.
|