hi,
I have a login form. The form is submitted via ajax to an .aspx file to actually carry out the login action. In this case, I either have to use $.get() or $.post() but each of them reveals the password (when I look in firebug).
Is there any way to hide the posting information from the user?
Use https - plain http is no place to try to "hide" passwords or other valuable info.
There is no difference in your logic and a website which uses normal posting ;-) You can use an ssl certificate to encrypt the traffic.
Either you can use SSL as mentioned by Alex & Shoban, or you can encrypt the password and then sent it via Ajax request.
ssl should be your only choice because if you will try to encrypt password on simple http... due to client side scripting your are exposing your encryption logic to users.... so ssl is right choice in this.
It is highly recommended to use SSL if at all possible. But, you could encrypt the password before sending it using JavaScript crypto libraries.