Discoverer 4i, Help!

Hi!
I’m now using the following Statement:

app_user, app_pw and conn_string are variables which are filles
with get_application_property.

web.show_document(‚http://myserver/discoverer4i/viewer?’||
‚nlsl=en‘||
‚&us=‘ || app_user ||
‚&pw=‘ || app_pw ||
‚&db=‘ || conn_string ||
‚&fm=xls‘ ||
‚&wb=machines_by_categories‘,‘_BLANK’);

Using this Statement makes the password visible in the url.
How can I avoid this ?

Regards

Dmitri