为什么我的密码显示在检查元素-网络选项卡中

Question

I have a login page which has a text field and a password field. When I click the submit button, it sends data to a php file which makes sure the data is the same as the hash stored in the database but when I check the inspect element(F12) chrome, in the network tab, the username and the password are shown in plain text.

How can I avoid that?

Any advise about securing login pages will be greatly appreciated.

Thanks in advance.

Answer 1

Even when using an <input> of type password one could inspect it, and change its type to text to see the real password.

Although, this is not very important as long as you unset your users' session cookies every 10 minutes or so of inactivity and prevent them from saving password using their browser (using a dynamic name for login / password inputs should do the trick).