How does HSN.com do the sign in/register reveal?

carpeperdiem · #1 06-09-2013, 03:31 PM

Anyone know how hsn.com does the sign in/register reveal?
From http://www.hsn.com, click on the "Sign in/Register" link. What are they doing?

One thing I noticed: if you close the link without logging in, the div goes blank. Bug.
But still, it's a cool technique. Can we make x-cart do this too (without the display bug)?

exsecror · #2 06-10-2013, 04:57 AM

My best guess just by quickly looking at it is they have a hidden div with all the necessary content and they use something similar to jQuery UI's According (http://jqueryui.com/accordion/) effect and capturing the click of the link to execute it. The empty div bug is probably just a css or javascript kinky they missed in testing.

carpeperdiem · #3 06-10-2013, 05:26 AM

Thanks,
What does putting a hidden div with login do for a secure page? Because the registration and login links are HTTPS you can't just have that on the homepage? Yes?
I'm on my phone right now so I can't really check HSN but I will. Thanks for sharing this

carpeperdiem · #4 06-10-2013, 08:53 AM

Wow. HSN.com, 24th largest internet retailer in the world, 2012 sales $1.45 billion, doesn't use https for customer login. They are way smarter than the rest of us fools who bust our ass making our site "secure". The customer experience seems to come first for HSN. Either regular email login or social login, the site never goes to https. No lock. Wow. Just sharing. I guess they can buy their way out of any mess the non-secure site may create.

cflsystems · #5 06-10-2013, 09:08 AM

checkout page is https

exsecror · #6 06-11-2013, 04:50 AM

Yeah I was about to say you can't do mixed mode http/https with this method. Unfortunately some of the bigger retailers don't follow a lot of the rules (including password enforcement) because they want more "user friendly" habits on their site.

cflsystems · #7 06-11-2013, 07:52 AM

And they get away with it right. Talking about double standard...

exsecror · #8 06-11-2013, 12:21 PM

Welcome to the world of online commerce where a certain clique gets to give everyone else a giant middle finger when it comes to standards sigh. Then they wonder why they're all over the news because some bored bastard cracked into their system and stole hundreds of logins and associated information (which half of the time use insecure hashes like sha1/md5 or reversible encryption)