I created function for Encryption and decryption. In the database the passwords are stored in encrypted form. But that encryption method is server side, so while POST the password travels in plain text form, before getting encrypted. So that's a serious flaw.
Encrypt password at client side
I am using SHA256 encryption technique to encrypt / decrypt password. But that Encrypt method is server side so while POST the password travels without getting encrypted. Is there a way I can encrypt it at client side using Ajax $.ajax ?