php ajax url parameter -
is there concern if expose our php page in ajax, url param? i've seen website able hide .php or .aspx page. below production code. way improvise if poorly written it? $("#login-submit").click(function(e){ e.preventdefault(); var vusername = $("#username").val(); var vpassword = $("#password").val(); $.ajax({ url: "postlogin.php", type: "post", data: {'action':'login-submit','username':vusername,'password':vpassword}, datatype: "json", success: function(data) { if(data.status == 'success'){ window.location.replace("index.php"); }else if(data.status == 'false'){ $('#errmsg').fadein('slow'); $("#errmsg").html(data.errmsg); }else{ ...