when using the post method the form data is passed in the http header, is it possible this information can be accessed by someone using a protocol analyser to retrieve the password. I am trying to find a database login method.


Code:
<%@ Language=VBScript %>
<%option explicit%>
<HTML>
<HEAD>
<META NAME="GENERATOR" Content="Microsoft Visual Studio 6.0">
</HEAD>
<BODY>
<H1>ASP FORM DEMO</H1>
<form name="userinfo" ACTION="maininfo.asp" METHOD="post">
<H2>Please fill in the following form</H2>
<PRE>
Name  <INPUT type="text" name="uname">
email <INPUT type="text" name="password">

</PRE>
<INPUT type="reset" value="Reset" id=reset1 name=reset1>
<INPUT type="submit" value="Submit" id=submit1 name=submit1>
</form>
</BODY>
</HTML>