General question about Forms and variable POST'd to another script

[jwocky]

I have a set of variables which i am sending to a second script via the POST method, my question is, can this data be extracted by a hacker somehow?

For example, i'm sending the user's password via a post command to another script, i'm guessing the most a hacker can do is find out his own personal password from the script posting the data to another script, but he couldn't find another person's password... ?

Also another general about php scripts, these scripts themselves can't be downloaded from a server to view the content is that correct ? The reason is the script itself contains some sensitive information