←All work
Design · Development / 2026

Sharr Turist

A travel agency in Ferizaj, working since 1993, given two things: a fast public website for its offers, and a private system that tracks every client, booking, passport and payment.

Visit sharrturist.com ↗ Book a call
sharrturist.com — the launch film, built from the site’s own search, offers and prices.
Client
Sharr Turist · Ferizaj
Role
Design, full build & security
Design
Troiana
Stack
PHP · MySQL · vanilla JS
Design

Designed and built by Troiana. The structure and visual design are ours; the offers, prices and business details are Sharr Turist’s own.

01

Overview

Sharr Turist sells flight tickets, organised group trips and holiday packages. The office’s first request was simple: who the client is, which ticket, a phone number, paid or not paid.

We built that into a full office system and designed a new public website alongside it. The system records sales; it does not sell tickets online and it is not fiscal software. Because it holds passport data, security was part of the design from the start.

100
Lighthouse mobile performance
3
Checks at every sign-in
134
Automated checks on the office system
02

What we built

01

Public website

Offers with departures and prices, search that tolerates typos, flights, Schengen document guidance, and enquiries by form or WhatsApp.

02

One booking flow

Flight tickets, organised trips and packages share one form, with passengers ticked from the payer’s family and their saved passports.

03

Payments and debts

Deposits, part payments and refunds, printable receipts and pro forma invoices, in euros or Swiss francs, with everything still owed in one list.

04

Reminders that write themselves

Lapsing ticket options, debts before travel, upcoming departures and expiring passports become a list, each line opening WhatsApp with the message ready.

05

Protected passports

Passport numbers and uploaded files are encrypted, every view is logged, and the owner is alerted to unusually heavy access.

06

Sign-in and backups

Every sign-in needs an email code, an authenticator app and an owner-approved device. Sealed backups leave the server automatically and have been restored in testing.

Across the site

Live pages, as they are today.

The office system

The private side, on fictional data.

These screens are the real interface running locally on a separate database. Every client, trip and amount shown is fictional; no real record appears here.

03

Measured

Google Lighthouse scores for the live homepage. Largest Contentful Paint is 0.36s against Google’s 2.5s bar, and layout shift is 0 against a limit of 0.1.

100
Performance
100
Accessibility
100
Best practices
100
SEO

Google Lighthouse · desktop · median of three runs · 5 November 2026

04

Outcome

The agency has one place for its public offers and one for its daily work. A speed pass took the live homepage from 75 to 100 on mobile Lighthouse, with largest paint down from 7.1s to 1.7s and page weight from 1.6 MB to 212 KB.

Built with
PHPMySQLVanilla JSAES-256-GCMAuthenticator sign-inSealed backupsAVIF imagesStrict CSP
More work

Different problem. Same standard.

All work →