hide http get/post request params from the script user