Topic: is it secure to send username & password thru a link in php script?

[markthien]

Hi guys,

    I am thinking of using Clickatell api to send SMS like below:

http://www.clickatell.com/developers/php.php

However, their api accept username and password in the url. hence, is it secure to send like that? I mean is it vulnerable to hacker?

regards,
Mark

[Prismatic]

Yes it is vulnerable. Sending a username and password in plain text outside of SSL is always open to eavesdropping.

Edit - It seems Clickatell supports HTTPS, use it.