But only on the secure version of the site. I guess you don't really support that as the main way to visit non-accommodation pages - but it used to have search until recently... Any chance of getting it back? (Any chance, now that we're on the subject, of moving toward an "everything over SSL" model for the site? It's a pain to deal with all the sub-resources, but would be really nice all the same...)
[ Edit: Edited on 22-Sep-2014, at 23:29 by Sander ]
A few of the browser started showing the lock as broken when there is a form present that submits to a non-secure page. We can't afford to be showing a broken lock on booking checkouts in particular.
The simplest quick solution was to remove the form when on SSL pages.
Everything over SSL would be a nice change, but there are a lot of spinning parts here and I'm not really ready to tackle this. Also the SEO impact of changing all our URLs is quite unknown at this point and we can't really afford to lose any more rankings at this point in time. I know Google has stated they would boost sites on SSL, but after seeing other people try this, so far it's not evident that this is actually the case. If this were a brand new site, it would definitely be all SSL from the start. But with existing incoming links to consider it makes it a lot more difficult.
This change will happen eventually and I agree would be for the best, but for now it's a bit of wait and see.
Ah, of course!. Rather annoying that broken lock for a _form_ on a page, since it doesn't actually threaten the security of the actual page content at all, and forms are rarely the main content. I'm all in favour of the current push for better security by browsers, but that one rather missed its mark afaic.
There's a way to keep the search form on all pages, btw: Just change its action from "http://www.travellerspoint.com/search.cfm" to a relative "/search.cfm". That should work everywhere, and not trigger the warning.
And yeah, I hear ya on SSL everywhere...
Yes, considered that too. But we run into some trouble with pages that break when loaded on SSL (actually, in the accommodation area, just not the booking page). I'm sure you noticed that I reverted back to the main navigation bar links all pointing to http. This was for that reason. And also the reason that the form is not submitting to a relative url.