Donation troubles to blank page

[dstoker]

We are getting reports from potential donors that they are hitting submit and going to a blank page with the following url: https://faas.cloud.clickandpledge.com/
The donations are not processing and there is no evidence within my Click & Pledge interface that they made a failed attempt.

I have not been able to recognize a pattern in their errors-- various credit cards, various browsers. No unusual characters or entries into the fields. The last reported error was with a Discover Card using Internet Explorer, unknown version.
Other donations in the same time period are coming through successfully.

Can you take a look at "view source" on our page http://ashoka.org/donate and see if you recognize anything out of order?
Thank you.

[dstoker]

If it helpful our Account ID is: 18016
WID for this page is: 47819

[CnP.Support]

Good day!

The problem is the FaaS will NOT respond to requests coming from http:// - it has to be https://

I am confused since your site was secure based on our previous discussions.

[CnP.Support]

Hi again!

I just tested your page and it seems like your site responds to both http:// and https:// - if people visit it with http:// our system will NOT respond since you are posting someone's credit card information across a non-secure channel.

I strongly suggest that you write a script that detects the landing page URL and if the site URL is http for it to redirect to https://

[CnP.Support]

Good day!

Any updates on this issue?

Please let us know if the previous suggestion has fixed the problem.

[must_create]

I'm having the exact same problem! The weird thing is that I just fixed the donation page last week, received several donations no problem in the past few days, and then today it's just routing to a blank page. Any suggestions?

http://mustcreate.org/howtohelp/donation.html

[CnP.Support]

Good day.

Sorry for the problem.. the answer to the previous post applies to your case as well.

Please note that FaaS platform will NOT (WILL NOT) respond to any post coming from a non-secure connection. If someone visits your form and submits it when the page is http:// - the FaaS will ignore it. ONLY secure pages (httpS://) are allowed to post to FaaS.

The link you sent me is http://mustcreate.org/... - http:// is NOT allowed to post.

Please make sure your visitors can only visit the donation page when it is in a secure mode.

[must_create]

Got it, thanks. I hope that solves all my issues with the page.

[CnP.Support]

We have completed testing of an update to the FaaS processor where it will send the primary contact of the account an email with detailed instructions if a non-secure post comes from the site. This way you will be notified first before a client contacts you.

We are not going to go live with it a day before December 31 since tomorrow night is the busiest time of the year and it is best not to make any changes to the system.

[dstoker]

I believe our website folks have been in contact with you by email and phone working on the issue further. I do know they implemented the recommended redirect but we continued to receive donor reports of the same experience - being taken to a blank page with a url beginning with faas upon submitting their information. We received 3 such reports during the hour of 4-5pm EST today (Dec 31st) during which time we also did not receive any successful transactions which was unusual compared to the rest of the day. Were you experiencing any universal problems during that hour?

The last donor I worked with, I asked them to do the same thing as during their previous attempt in the day and then asked them to confirm they were on a secure page before submitting, which they were, and the transaction went through successfully. I cannot confirm with exactness that their behavior was exactly the same.

Is there any way to know how many and when such failed attempts occurred? Preferably we would like to know who specifically so we can reach out and help them resubmit. The reporting options within my user interface in C&P only allow me to see attempts which were not successful due to declined credit cards, not submission errors.

[CnP.Support]

Good day!

We have discussed this error in this page for several posts and the answer is always the same.

I am 100% sure that the problem is your patrons are using your page through an insecure link- (http://) - the FaaS platform ONLY responds when the page posting to it is a secure page (https://). The FaaS platform, for security and PCI mandates, does not respond insecure posts.

Please see if you have links to your page that are referencing your donation page and can be accessed as http://

The best solution is to have a redirect from http to https if the page is hit through an insecure reference. The donation form HAS TO BE SECURE OR FAAS WILL NOT RESPOND.

Considering the insecure post we do NOT save or reference the post.

An update will be made later today where any non-secure post will initiate an email to the main site contact referencing the post and the link to the violating page.

I hope I have answered your question. Please let us know if you need any further help.