Hey, I have a program that allows a user to log in and then they can use the functionalities that are there. The program runs fine, the only problem is that you can see their username and password in the URL. This is not safe at all, because anyone passing by can figure what their user name and password is. This is what the URL looks like: http://server1/cgi-scripts/program/enduser/frameset.pl?username=Ken&password=King Please give me your idea as to what approach i should take in tackling this problem. ThanX!, Kiko