I want to use ajax to submit the form, verify that the user name password is correct, and use json to transfer data, which is also a post submission method, but once submitted, I find that the user name and password can be seen on the developer"s tool. May I ask if I misunderstood it, should not write it this way, or what is wrong and what steps are missing (let"s not talk about password encryption)?