I would like someone to answer this and if possible provide some reference links to back it up (if possible). Need to prove to someone its not secure.
If I have a form with the post method on a non-secure page, but the action attribute is pointing to a secure URL, is the submitted form secure?
Short answer is : no secure if ssl(https) is not implemented. Please have a look at my question, and the answers from security guys to that here
Hope this helps.