If someone wants to be able to log into a Website without having to enter a user ID and password, I know it can be done via the HTTPrequest:

www.mysite.com?UserID=me&Password=secret

My application could get the user ID and password from the QueryString and validate it against a database. However, this presents somewhat of a security problem, since anyone who looks at the link can see the user ID and password.

Is there a way to provide an added level of security (e.g. via cookies or some other creative means)?

Thanks.