we can easily make the url empty without javascript or an other plugin here the code put it on the top of the code after session code but note we have to only use post method . it is safe and not more complex
header("Cache-Control: no cache");
session_cache_limiter("private_no_expire");
cheers