I have read up on submitting forms, ie. username and password, with ssl. One thing kind of confuses me, I’ve read that in order for the info to be securely sent, only the form action needs to be https, not the page where the form resides.

This doesn’t make sense to me, this is what I understand. An unencrypted form page submits to an encrypted login page. The data must be sent to the server for php to process the data, so wouldn’t that mean that the data is unencrypted?

I’m sure there is a proper explanation, I would just like to understand how it works. Thank you in advance.