Password Transmitted over Query String

A password is sensitive data and shouldn't be transmitted over query string. There are several information-leakage scenarios:

• If your website has external links or even external resources (such as image, javascript, etc), then your query string would be leaked.
• Query string is generally stored in server logs.
• Browsers will cache the query string.

Do not send any sensitive data through query string.