title: Is the URL fragment identifier sent to the server?
body: <blockquote>
    <p><strong>Possible Duplicate:</strong><br>
    <a href="https://stackoverflow.com/questions/940905/can-php-read-the-hash-portion-of-the-url">Can PHP read the hash portion of the URL?</a>  </p>
  </blockquote>
  
  
  
  <p>The (famous?) web site mega.co.nz uses a hash mark in URLs to link to encrypted files; the portion of the URL after the hash mark contains a password, and encryption is claimed to happen on the client side. It is certainly feasible to use javascript for client-side encryption but … isn't the URL sent to the server, thus revealing the password to the server itself? </p>
  
  <p>The URL looks like </p>
  
  <pre class="lang-none prettyprint-override"><code>https://example.com/#!encryptedfilename_password
  </code></pre>