+ Start a Discussion

login and passwd showing up in browser history as if HTTP GET whn using http POST

I have a login page I wrote uses the Sforce API in php. I have not been able to produce this, but my partner claims when he has been using the page it shows up in his IE browser history as a url with a url query string that shows the username and passwd in clear text. I have not been able to reproduce the problem on mac and windows versions of Firefox and Internet Explorer. In my testing it appears in all browser histories as I would expect a POST to just the URL that is the action of the form no arguments.

Has anyone else seen this?
How do I reporduce the problem if so?
How do I fix the problem?

Richard Yaker
I've never heard of this, but if this is the case, I'd think you'd see for any site where login info is posted.