Change your form method to POST and use the $_POST variable instead of the $_GET variable, and you will not see the variables at the end of the URL

Source: php – Hide parsed variable from url bar – Stack Overflow