How to expose the packet capture password using the PHP + API interface

I want to use a text message API to send a text message packet capture password. the API provides the following official submission methods:
Http://www.xxxx.com/abc? Action = send & userid = 12 & Account = account& Password = password& Amp; mobile = 15023239810 & content = content & sendTime = & extno =

Open software allows users to send text messages after registering an account for free, while sending text messages using the account and password in my API.

I used PHP's curl_setopt function for submission, but my account and password will be caught by the packet capture tool. how can this problem be solved? Thanks

Reply to discussion (solution)

You cannot change the format required by the API provider.

No, because the interface defined by the API is like this.

Unless you can modify the parameters obtained by the API, encrypt them first, and then decrypt them.

For API design problems, we recommend that you change the API to a safer authentication method, rather than a plaintext account or password.

On the Internet, basically all the APIs of text message senders are like this, isn't it ....

PHP calls the sms api on the server. Do I have to capture packets from the server ??

The key is that packets can be captured on intermediate devices. It is always insecure.