window.open(), window title bar, and the POST method

[M Burke]

I am opening a new window when someone logs in. The problem is the user name and password are appearing in the browser title bar because its doing a GET. How can I prevent the user accout info from appearing in the title bar? A POST perhaps?

Code...

<form action="" method="post" name="loginForm" onsubmit="submitLoginForm();return false;">


STANDARD_SCALE_DISPLAY_WIDTH = 1280;
STANDARD_SCALE_DISPLAY_HEIGHT =1024;
function openPopup(userName, pwd){
ref = window.open("popup.jsp?username="
+ userName +
"&password=" +
pwd,'P20Web',
"'left=0,toolbar=0,menubar=0,resizable=1,location=0,status=0,scrollbars=1,top=1"
+ ", width=" + STANDARD_SCALE_DISPLAY_WIDTH
+ ", height=" + STANDARD_SCALE_DISPLAY_HEIGHT + "'");

ref.moveTo(0, 0);
ref.focus();


}

[Paul Clapham]

Why would you need to hide that? Sure, I see that you have a password there, but that password is visible to anybody who displays the source of the page. It's already completely insecure.

[Bear Bibeault]

Don't log in with the popup. Show the new window after logging in through the parent window. Or, display the login form in the popup.

This is all going to be SSL protected in the end, right?