title: Is password is sent as text in this after submitting PHP?
body: <p>i was searching about simple hashing with passwords in login form.
  i came across this <a href="http://tinsology.net/2009/06/creating-a-secure-login-system-the-right-way/" rel="noreferrer">http://tinsology.net/2009/06/creating-a-secure-login-system-the-right-way/</a>. here he hashes the password, creates a salt, and then again hashes the password &amp; salt.
  I am building a login form myself, this is abc.php</p>
  
  <pre><code>&lt;form name="register" action="register.php" method="post"&gt;
  Username: &lt;input type="text" name="username" maxlength="30" /&gt;
  Password: &lt;input type="password" name="pass1" /&gt;
  Password Again: &lt;input type="password" name="pass2" /&gt;
  &lt;input type="submit" value="Register" /&gt;
  &lt;/form&gt;
  </code></pre>
  
  <p>after submitting goes to,  register.php, it has</p>
  
  <pre><code>$u=$_REQUEST['username'];
  $p=$_REQUEST['pass1'];
  //salt create function
  //hashing code
  //final hash password 
  </code></pre>
  
  <p>and then submitting $u &amp; 'final password' in the database.</p>
  
  <p>Q: my question is when submitting the form from abc.php, does the password goes as text? </p>
  
  <p>and if yes, then there is a chance of someone reading it, and then what's the need of hashing passwords, because even when i login, i will submit the page, and retrieve the pass and username from $_REQUEST on maybe another page, where it will be checked, it travelled as text, and thus can be read by someone.</p>