I\'m developing website where user submit credentials using ajax,php and using POST method
and i want to protect login credentials not in plain text but i don\'t want to use
You can use a provider like OpenID who will handle the authentication for you. The provider uses SSL to verify the credentials and then you can validate it by using their API, so the user never actually sends credentials to your page.