https pages and popup

[vtheme]

Hi,

I just wanted to check…. if a popup is used to house a change password or other confidential information form and the popup is served on a https page, is all of the content in the popup also protected by https? I just do not want to be sending unprotected info on these pages.

Topic

[Jason Bobich]

You mean like you’re loading an external webpage in an iframe? — Then, yeah it’s like Vegas… Whatever happens in the iframe stays in the iframe.

[vtheme]

hmm

so does the iframe go with the page or with the popup content?

so to rephrase… I have an https page. I want to use the popup to show a change password form. The form is not https, but the page is .

Would it be safe to allow pw changes within this popup form on the https page?

sorry to be a knob, just want to get this one right.

[Jason Bobich]

How exactly are you putting content the popup? What are you using for a “popup”? Are we just talking about the [popup] shortcode? Are you talking about loading something with Magnific Popup script? Are you loading an iframe in the popup or content from the current page?

[vtheme]

In this case, specifically, it is the s2member_profile shortcode which allows users to change their pw/names etc.

I also want to use this for a woocommerce page that will allow modifying an address.

Alternately, I can do this with a formidable form that modifies user meta.

All would be wrapped in your [popup [/popup] shortcode.

Any help is appreciated as I dont want to compromise anyone.

[Jason Bobich]

You’re still not telling me the source of the login form, as I have no idea what an s2member shortcode is. Is it on another site that you’re including in an iframe? Or is the login process happening on your site? Do you have a link to this page on your site with the login form that I can see?

[vtheme]

so sorry!

s2member is a membership plugin that works on our site. The s2member-profile shortcode basically allows a logged in user to edit their names and password for the wp site.

There is no iframe, the logged in user will be modifying info for our site. I could provide a link to a page with this, but it would require being a registered user and logged in, I created a user for you on the site along with a page url and send that info privately.

[Jason Bobich]

I would say yes, if your site is setup on https, then you’re probably fine. But really, this question I don’t think has anything to do with the WordPress theme you’re using. To be sure, I would suggest contacting support for plugin.

[vtheme]

Ok, let’s simplify it, what if I just wanted to have a user on our site change their pw and wrote a simple shortcode for that and placed it in the popup content. Would the resulting popup screen be also https?

Or, can you tell me how to check for this? The popup is part of the theme, but I just want to be clear about how it works in this case.

Appreciate any help. I’d love to use this in this way.

[Jason Bobich]

The shortcode is just displaying content that is already on your page (often referred to as an “inline popup”). It’s not moving anything away from the current page.

Would the resulting popup screen be also https?

So, yes, because you’re obviously still viewing the same page. The fact that it’s in the popup doesn’t change anything.

[vtheme]

Beautiful, thank you so much for the explanation – I should have made this easier at the start,

[Author]

Replies