form keeps showing password at the top of the address bar

although it compares the encrypted password with the one in the database, it shows the real password up to.

what can I do?

please read my 'editing a code login that can be a logout' topic.

Use method="post" and not method="get" in the form?

tried, still no go

what's your form tag looking like?

Jee

<form><input type="hidden" name="action" value="login"> Username:
<input name="username" type="text" width="10" size="20"><BR>
Password:
<input name="password" type="password" width="10" size="20"><BR>
<INPUT TYPE=SUBMIT VALUE="Log In">
</form>


the form is on the same page as the login info, it keeps putting the user name and login in the header, even though the code is using md5

but i think even at sign up, when the person enters their name and pwd, it tells the password somewhere up top too.

<form action="<?= $PHP_SELF ?>" method="post"><input type="hidden" name="action" value="login"> Username:
<input name="username" type="text" width="10" size="20"><BR>
Password:
<input name="password" type="password" width="10" size="20"><BR>
<INPUT TYPE=SUBMIT VALUE="Log In">
</form>

perfect, thanks

:)