1

A login form is submitted and when I try and dump the values the form structure is empty in IE but not FF or Chrome. This is in a DEV environment using HTTPS and a corporate self signed certificate.

I don't really think this is Fusebox related but it is the framework I'm using. No choice in the matter as it is legacy code and no budget to change it so please don't suggest I move on.

I've discovered that in IE it doesn't like the form action to be of the format:

/directory/index.cfm?fuseaction=app.Security

Instead it wants a fully qualified action

https://www.mycompany.com/directory/index.cfm?fuseaction=app.Security 

<form action="/directory/index.cfm?fuseaction=app.Security" name="loginForm" id="loginForm" method="post">
  <div style="width:55%;" align="center" id="fieldset">
    <fieldset class="border" style="width:70%;">
        <legend>Login</legend>
        <div style="padding:2%">
            <label for="userID">User ID: <span id="error1" class="redbold" aria-live="assertive"></span> </label>
        </div>
        <div>
            <span class="required">*</span>&nbsp;<input type="text" name="userID" id="userID" size="32" maxlength="8" value="" />
        </div>
        <div style="padding:2%">
            <label for="pw">Password: <span id="error2" class="redbold" aria-live="assertive"></span></label>
        </div>
        <div>
            <span class="required">*</span>&nbsp;<input type="password" name="pw" id="pw" size="32" maxlength="20" value="" />
        </div>
        <div style="padding:2%" id="formButtons">
            <input type="submit" value="Login" class="buttonfield" title="Login to eAgenda" />
            <span style="padding-left:5%; margin-left:5%">
                <input type="reset" value="Clear" class="buttonfield" title="Clear" />
            </span>
            <div id="errorMsg">
                <p>
                    <span class="redbold"></span>
                </p>
            </div>
        </div>
        <span class="required">*</span>Mandatory field
    </fieldset>
  </div>
</form>
SOS
  • 6,430
  • 2
  • 11
  • 29
Smoketx
  • 93
  • 11
  • 3
    Can we see the code for your form? What version of IE are you using? – James A Mohler May 14 '19 at 18:34
  • Updated as requested. – Smoketx May 14 '19 at 19:26
  • Your `form` tag doesn't close. – Alex May 14 '19 at 19:31
  • 1
    @Alex The final tag wasn't indented enough, so it wasn't visible. Fixed. – SOS May 14 '19 at 19:43
  • 2
    @Smoketx Use the IE developer tools to check if the POST request contains the expected form data (network tab). – Alex May 14 '19 at 19:50
  • 3
    *it wants a fully qualified action* Does it work when you supply one? *"don't really think this is Fusebox related"* To verify that, temporarily take fusebox out of the mix. Create a small (isolated) test and action page. Are the results are the same? FWIW, the code above worked with a non-https script and IE11. – SOS May 14 '19 at 20:18
  • @Smoketx Which page you have dump the form fields? Have you dump the correct location? – Sathish Chelladurai May 15 '19 at 13:28
  • @SathishChelladurai I dumped them in the primary CFC that gets loaded. The dump is fine in FF or Chrome but empty in IE. – Smoketx May 15 '19 at 14:14
  • @Smoketx Have you use the abort after dumping in the CFC file? Mostly we should use abort after dump the variable. Mostly Its no needed to use the abort for the .cfm – Sathish Chelladurai May 15 '19 at 14:26
  • @Ageax that worked. Now going back to the servers and having SSL requirements rolled back and putting production code in place to see if it works locally. Thanks for the suggestions folks. When I hit a solution I'll post it here. – Smoketx May 15 '19 at 14:29
  • 2
    Yes @SathishChelladurai I've been coding in CF for 20 years. I understand the basics. But thank you. – Smoketx May 15 '19 at 14:30
  • Sorry @Smoketx I didn't notice your profile. OK. If you hit the solution please post it here. Thanks! – Sathish Chelladurai May 15 '19 at 14:54

1 Answers1

4

In the end it was a <base href="http://..."/> tag in the header. Removing or making it https solved the problem.

SOS
  • 6,430
  • 2
  • 11
  • 29
Smoketx
  • 93
  • 11