Hiding password in headers using https

3
votes

I can't seem to hide the passwords for a login form using https. When I view the headers, I see the password in plain text even though I am using encryption AND https. What am I doing wrong?

All I have is this: form.html username password (using post, send to process.php)

process.php $password = md5($_POST['password']); echo $password; (echo's encrypted password, but in headers, I can see password in plain view)

Isn't ssl supposed to be secured???

1
php

1 Answers

7
votes

SSL encrypts data as it's being sent from the server to the target computer.

Basically SSL protects your data from the rest of the internet not you and the computer issuing the request.

Read up on how SSL works