# Trying to hide URL parameters from http GET by reposting using http POST **URL:** \ **Category:** General\ **Tags:** http-request\ **Created:** [8 January 2023 20:01 UTC](https://discourse.nodered.org/t/trying-to-hide-url-parameters-from-http-get-by-reposting-using-http-post/73384 "2023-01-08T20:01:58Z")\ **Posts on this page:** 2\ **Page:** 1

**Author:** ![knowledgeshark](https://sea2.discourse-cdn.com/flex026/user_avatar/discourse.nodered.org/knowledgeshark/32/4820_2.png) [@knowledgeshark](https://discourse.nodered.org/u/knowledgeshark)\ **Post date:** [8 January 2023 20:01 UTC](https://discourse.nodered.org/t/trying-to-hide-url-parameters-from-http-get-by-reposting-using-http-post/73384/1 "2023-01-08T20:01:58Z")

I've been using the `http GET` where parameters are passed, and then I create a custom web page (after grabbing information from the database assuming the username and password are valid). The issue I've had is that the URL shows those parameters including password. ```auto eg. http://localhost:8080/testget/myUser/myPassword ``` I finally got around to trying a POST from inside the generated web page, which wraps those parameters in JSON. I think I finally got the POST to work using `window.document.write()` but the parameters still show on the URL. The enclosed flow encapsulates a sample invoked as repeated here: ```auto http://localhost:8080/testget/myUser/myPassword ``` Then click the `hide password` button which invokes the POST to `/posttest`. But the URL doesn't change. Any ideas on how to accomplish the hiding of values? Or another way to redirect to the generated html code from node-red? Also since this includes CSS, SCRIPT and HTML, the `getElementById(html)` won't work. thanks, ```auto [{"id":"f0758282d23c7a8a","type":"tab","label":"POST vs GET","disabled":false,"info":"","env":[]},{"id":"9e382bde773a1058","type":"function","z":"f0758282d23c7a8a","name":"Change POST to msg.req.params.NAME","func":"\n\n\n\nvar username = msg.payload.username;\nvar password = msg.payload.password;\nvar guestpassword = msg.payload.guestpassword;\n\nmsg.req.params.NAME = username;\nmsg.req.params.PASSWORD = password;\nmsg.req.params.GUESTPASSWORD = guestpassword;\n\nconsole.log(\"args: \" + msg.req.params.NAME + \", \" + msg.req.params.PASSWORD);\nreturn msg;","outputs":1,"noerr":0,"initialize":"","finalize":"","libs":[],"x":240,"y":540,"wires":[["30ce8ae681d6a2ee"]]},{"id":"73ba552528969e57","type":"http in","z":"f0758282d23c7a8a","name":"","url":"posttest","method":"post","upload":false,"swaggerDoc":"","x":120,"y":440,"wires":[["9e382bde773a1058"]]},{"id":"1707616b797b53e8","type":"http response","z":"f0758282d23c7a8a","name":"","statusCode":"","headers":{},"x":850,"y":540,"wires":[]},{"id":"c1289b1715bd9d88","type":"change","z":"f0758282d23c7a8a","name":"set headers","rules":[{"t":"set","p":"headers","pt":"msg","to":"{}","tot":"json"}],"action":"","property":"","from":"","to":"","reg":false,"x":670,"y":520,"wires":[["1707616b797b53e8"]]},{"id":"30ce8ae681d6a2ee","type":"template","z":"f0758282d23c7a8a","name":"Create Web Page with parameters","field":"payload","fieldType":"msg","format":"handlebars","syntax":"mustache","template":"\n\n \nTest POST vs GET\n\n\n\n\n\n\n\n\n\n

POST Testing

\n
\n

user

pass

\n
\n\n\n","output":"str","x":600,"y":580,"wires":[["c1289b1715bd9d88"]],"icon":"node-red/alert.svg"},{"id":"efaea5db050195b4","type":"http in","z":"f0758282d23c7a8a","name":"","url":"/testget/:NAME/:PASSWORD","method":"get","upload":false,"swaggerDoc":"","x":180,"y":600,"wires":[["30ce8ae681d6a2ee"]]},{"id":"5e38d6cc45cd46f7","type":"comment","z":"f0758282d23c7a8a","name":"posttest needs JSON values for NAME and PASSWORD","info":"","x":250,"y":400,"wires":[]},{"id":"2dad8e6c58315318","type":"comment","z":"f0758282d23c7a8a","name":"testget uses values for NAME and PASSWORD","info":"","x":240,"y":660,"wires":[]},{"id":"a1d2dec90bfa3d23","type":"comment","z":"f0758282d23c7a8a","name":"Convert JSON into NAME and PASSWORD","info":"","x":290,"y":500,"wires":[]}] ``` ---

**Author:** ![system](https://us1.discourse-cdn.com/flex026/uploads/nodered/original/1X/d073cd938eafa2e558d7c2cd59003b3ef4963033.png) [@system](https://discourse.nodered.org/u/system)\ **Post date:** [9 March 2023 20:02 UTC](https://discourse.nodered.org/t/trying-to-hide-url-parameters-from-http-get-by-reposting-using-http-post/73384/2 "2023-03-09T20:02:55Z")

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.