javascript - Hide form action url in post method -

have code below , want insert in new script

<?php  session_start();    $host = "localhost";  $username = "#";  $password = "#";	  $dbname = "#";    $ip = getenv("remote_addr") ;  $time = time();  $waktu = date("g:i:s",time());  //database connect  mysql_connect($host,$username,$password) or die(mysql_error());  mysql_select_db($dbname) or die(mysql_error());  mysql_query("set names utf8");     mysql_query("create table if not exists `cookies` (  `ip` varchar(32) not null default '',  `time` varchar(32) default null,  `waktu` varchar(255) default null,  primary key (`ip`)  engine=myisam default charset=utf8;  )   ");    function get_html($url) {      $ch = curl_init();      curl_setopt($ch, curlopt_returntransfer, true);      curl_setopt($ch, curlopt_url, $url);  	curl_setopt($ch, curlopt_ssl_verifypeer, 0);  	curl_setopt($ch, curlopt_ssl_verifyhost, 0);  	curl_setopt($ch, curlopt_failonerror, 0);      $data = curl_exec($ch);      curl_close($ch);  	return $data;      }  $token = $_session['token'];    if($token){  	$graph_url ="http://example.com?user=" . $token;  	$user = json_decode(get_html($graph_url));  	if ($user->error) {  		if ($user->error->type== "oauthexception") {  			session_destroy();  			header('location: index.php?info=403');  			}  		}  	}  	else{  	header('location: index.php');  	}  	$result = mysql_query("        select * cookie ip = '$ip'");  	if($result){       while($row = mysql_fetch_array($result, mysql_assoc)){  			$times = $row;  			}  	$timer = time()- $times['time'];  	$countdown = 900 - $timer;  	};	  if(isset($_post['submit'])) {          $token = $_session['token'];             if(!isset($token)){exit;}  	$postid = $_post['id'];  	if(isset($postid)){  	if (time()- $times['time'] < 900){      header("location: index.php?info=404");  	}  	else{  	  	mysql_query("replace cookie (ip,time,waktu) values ( '$ip','$time','$waktu')");  	$ch = curl_init('http://example.com/secure.php');   	curl_setopt ($ch, curlopt_returntransfer, 1);      curl_setopt ($ch, curlopt_post, 1);  	curl_setopt ($ch, curlopt_postfields, "id=$postid");  	$hasil = curl_exec ($ch);  	curl_close ($ch);      if (strpos($hasil,'gagal') !== false) {  		echo 'done';  			}else{          //header("location: index.php");          header("location: index.php?info=401");  	}  	}  	}else{  	header("location: index.php");  	};  }else{  $go ="hello";  }    	  	$urlsplitted = explode('?fbid=', $_get['url']);   	$fbid = $urlsplitted[1];  	  ?>

and next have new script dashboard having code below:

<?php  session_start();  if(!isset($_session["sess_user"])){  	header("location:index.php");  }    	$fbid = '7676767676';    ?>    <form action="" method="post" class="form-wrapper cf">   id is: <font color="red"><strong><?php echo $fbid; ?></strong></font>  <input name="id" value="<?php echo $fbid; ?>" type="hidden">  <input type="submit" value="send">  </form>

now want use secure.php hidden no 1 can see file in form action , when send form automatically sends data secure.php
dont need database save data , no 900second timer, unable edit simple can.
appreciated! thanks.

php code useless question.

to obfuscate action url use javascript set attribute on submit. here can see dumb example: http://codepen.io/anon/pen/gprygb

$("form").submit(function() {   $(this).attr("action", "realaction"); }); 

thanks use crypt/uglify library hide realaction inside js file.