depends how sensitive they are. POST is more secure than GET as the parameters are not embedded in the URL, but that's not to say they're not there. it's not a 'secure' alternative, as such. think of http GET as a postcard, and POST as a letter in an envelope. that's the difference in terms of security. if you're concerned about security, look into https