password and login strings appear in url

One of my sites requires a username and a password which are then sent via a form to a new location.

However, when the new page displays, the password and username appear in the url. How to I prevent this?

For Example:
http://whatever.com/login.php3?user...r&password=pass

Someone suggested using GET rather than POST but this did not make any difference.

Thanks in advance

Sharky.

First off, it should be <FORM METHOD="POST"> rather than "GET"; the GET method sends form data in the URL, the POST method sends it in the HTTP headers, so with a GET I'd expect the data to show up.
Other than that, do you have a code example to look at?

Ton

Thanks Ton,

You made me think for a moment there and I checked the code, I had included the method=post, but with a slight spelling mistake.

Thanks for pointing me in that direction.

Sharky

tell me about spelling mistakes

i just spent a day looking for a missing '>' in a page with a LOT of layers and even MORE includes...

thinking about that: does anyone know a good, free text-editor which checks for the correctness of the brackets?

Vim (Vi IMproved) will do just that, and is free (open source). Runs on Win9x and NT (and on all flavour of Unix of course).
Your starting point is http://www.vim.org, do to download, binary distributions. I think you need 2 files, vim55rt (runtime files) and gvim55ole (graphical editor with ole capabilities). The editor will highlight any opening bracket w/o a closing bracket.

Enjoy, Ton

HTML Tidy from W3C will check for HTML mispells.
http://www.w3.org/People/Raggett/tidy/

Edit Plus is a good tool:
http://download.cnet.com/downloads/....lst.td_1562935

Features include a seamless browser window, customizable syntax highlighting, an HTML toolbar, user-definable tools and help files, powerful undo/redo functions, drag-and-drop editing, search and replace functions, a spelling checker, keystroke recording, and customizable keyboard shortcuts.
EditPlus also includes syntax highlighting for HTML, ASP, JavaScript, VBScript, Perl, Java, and C/C++; and URL and email address highlighting and activating.

It's a 30 day trial, but after that you only get a warning that you should register it. It's a great tool.

Sharky