I have to send a request using html form with either post or get method. I have to search the 3rd party database using my company's access and when the customer submits his requiremtns to be searched in the 3rd part database it has to even take my company's access id and password. How can I send the id and password of my company without letting user or anyone see it. The response will be an xml string or feed and how do you take that xml string? where can I store the xml string before parsing it?