Secure Login?

[kers7754]

I was reading the documentation about how to do a login form a custom site by doing the following:

<form method="post" action="http://www.yourdomain.com/whmcs/dologin.php">
Email Address: <input type="text" name="username" size="50">
Password: <input type="password" name="password" size="20">
<input type="submit" value="Login">
</form> 

 

If I replace the action with an https and my site has a valid SSL, does that username and password sent securely?

 

In other words, does the post secure the SSL tunnel first before sending the username and password, or is all that information sent at once in clear text before the SSL is secured?

[laszlof]

Yes, it will be secure. POSTing to an SSL address will establish the connection before sending any data.

[kers7754]

Thank you; that is what I figured but wanted to make sure.