If it submits to a secure server the form data will be encrypted before transmission I believe. At least that's my understanding, and that seems to be how ebay does it for example. Once you log-in, it submits to a secure page. -Micah On Sunday 16 January 2005 06:38 pm, Chris Payne wrote: > Hi everyone, > > > > I have a security question, I want to see if I am right or wrong. I have > programmed a system with PHP and MySQL, the main system resides on a secure > server, but the client wants the login page on a NON-Secure server for > marketing purposes. Am I the only one who thinks this is a major security > concern? > > > > Chris -- PHP Database Mailing List (http://www.php.net/) To unsubscribe, visit: http://www.php.net/unsub.php