HTTPS Form Posts to HTTP

No Comments

Quick Reference

Element Code: SE-014

Issue: Form on HTTPS page submits data to HTTP URL

Impact: Form data transmitted insecurely despite HTTPS page

Fix: Update form action URLs to HTTPS

Detection: Form inspection, security audits

What Is This Issue?

A form on an HTTPS page that posts to an HTTP URL sends data insecurely. Users expect HTTPS pages to be secure, but the form submission is vulnerable.

Why This Matters for Your Website

This creates a false sense of security. Users see HTTPS and trust the page, but their data is transmitted insecurely.

How to Fix This Issue

  1. Update form actions: Change to https:// URLs
  2. Check all forms: Contact, search, login, newsletter
  3. Relative URLs: Can help if site is fully HTTPS

Tools for Detection

  • Form inspection: Check action URLs

TL;DR (The Simple Version)

Forms on your HTTPS pages submit to HTTP URLs. Update form action attributes to use HTTPS.

About SEO ProCheck

Technical SEO consulting and GEO strategy with 20 years of enterprise experience. Case studies, resources, and tools for search and AI visibility.

Work With Me

Technical SEO audits, GEO strategy, site migrations, and international SEO. Hourly consulting for teams who need hands-on support, not just reports.

Subscribe to our newsletter!

More from our blog