Question

I use the default LogOn model of MVC3. LogOn partial view is in Layout view.

@Html.Partial( "~/Views/Home/LogOn.cshtml", new MyProject.Models.LogOnModel() ) 

After log on, Url is:

http://localhost:20234/?UserName=TestUsername&Password=121212&RememberMe=True

I dont want the password seen in the URL.
How do I remove the password (also Username, RememberMe) from the URL?

Answer 1

When you transfer data to server with GET method then parameters are visible in url. You should use POST method in this case. For example:

<form action="/Account/Logon" method="POST">
    <input type="text" name="Username"/>
    <input type="text" name="Password"/>
    <input type="submit"/>
</form>