Question

If I use $_GET function to send passwords, then apart from the fact that the password will be visible in my browser’s address bar, are there any more security vulnerabilities which are not already there in $_POST method ? Because in any case the password will only be visible in the users’ browser and not to anyone else.

Answer 1

Using $_GET Method the website url will be logged in history or browser and proxy servers this won’t possible with $_POST.

in $_GET password is appened in URL and $_POST password is sent in next packet so in both method password is sent in clear-text so solution is $_POST with SSL to encrypt the communication.