Seeing a site (ours is wholesale) is not necessary. Open the code.

For example, tpl_search.php

$content .= zen_draw_form('quick_find', zen_href_link(FILENAME_ADVANCED_SEARCH_RESULT, '', 'NONSSL', false), 'get');

That one line is all that is needed. It forces NONSSL mode, meaning, on any page you do a search and the page itself was SSL (say, checkout_payment), you will generate a warning in a browser, depending on your notification settings. In firefox, by default, you get a security warning.