'Force SSL' in the Joomla settings does not contribute a lot to safety.