I was just messing around in Forms9i for the first time and created my first form. When I ran it in a browser, I noticed that my user password for the db shows in the URL for the form:

http://sticky:8888/forms90/f90servle.../*****PASSWORD SHOWS UP HERE***** @&buffer_records=NO&debug_messages=NO&array=YES&qu ery_only=NO&quiet=NO&RENDER=YES

this doesn't seem cool. is this normal?