security - http - https - secure login - web application

Good morning,

I've just read this article:

http://www.c-sharpcorner.com/uploadfile/abhikumarvatsa/simple-login-project-in-Asp-Net/

but, as you can see, in this project username and password are sent over an http session, so that can be easily sniffed with a traffic network analyzer.

What can be the solution for this limitation ? Maybe use https protocol instead http ?

Where this code should me modified ? 

I really appreciate your help.

Best regards,

Gae