"I understand the rationale for that. But when the customer clicks the
back-to-cart button (which is the only choice really as the account
buttons don't do anything) he'll get the non-secure page warning, right?
If so, there isn't much of a difference."
No. Well, maybe. The difference is that going directly back to the cart
immediately after registering or logging in requires a 'redirect' from
secure to non-secure. In the newer v7.1 method when you go back to the
secure Account screen the button to go to the cart is just an href link
(so no redirecting occurs). Some browsers will display a warning when
clicking an href link that goes from a secure screen to a non-secure
screen, but the shopper always have the option to turn this particular
warning off, so most people only see this once and many have probably
already turned this off before they ever come to your store. The
difference with the redirect warning is that it can never be turned off
by the shopper, they are guaranteed to always see it if you redirect
from a secure page to a non-secure one.
Of course there is no real security issue either time the browser
warnings may be displayed. But for a non-internet-savvy shopper, seeing
it might scare them, so anything that can be done to avoid it should be
embraced.
-Loren
Don Lundell wrote:
On Thu, 21 Jul 2005 07:07:06 -0600, jim <jstavast@xmission.com> wrote:
Answers to your questions:
1. The original release of Customer Registration allowed the customer
to register and then they were redirected back to the cart. However,
the registration screen is accessed securely while the cart is not.
When you clicked on the submit button the registration form would be
"submitted" and you would get a warning that you were being redirected
to a non-secure page. There were Many complaints about the warning
scaring people into thinking the site was non-secure after they just
submitted their information. The security warning is not something
that should be of concern to anyone since the form information is
transfered securely but try to explain that to the vast number of
paranoid internet users. The current screen flow was worked out to
get around this issue. By going to the account info screen the
shopper stays on a secure page when the form "submit" occurs. From
Account Info page an href which doesn't cause the warning to occur is
used to get to the cart so the security warning is avoided.
I understand the rationale for that. But when the customer clicks the
back-to-cart button
(which is the only choice really as the account buttons don't do
anything) he'll get the
non-secure page warning, right? If so, there isn't much of a difference.
2. I agree with you on being able to enter address information when
you register instead of when you go through the checkout process.
As a workaround, I put the following text in the Customer Account
section of
a modified customer registration template, just about the back-to-cart
button:
"If you've just registered, click on the Back to Cart button."
This will at least point a newly-registered customer to continue with
the check-out
process rather than (I hope) try to fill in the payment or ship-to
information (which
he can't).
What's the process for submitting this to Shopsite as a formal request
for bug fix?
Does Shopsite support read this forum?
Thanks,
- dc