security - Is it advisable to configure a URL with both post and get? -
i have link on page redirects page request sent through post method. when user refreshes new page request sent through method. url used display page. question is, advisable use both post , same url call or cause problems related security or other? if please explain how.
no. use post
if link executing unsafe action (e.g. logout, change password) or sending sensitive data not want displayed in url (urls logged default in browser history , many appliances, proxies , web servers). post
can used when large amount of information sent.
otherwise use get
.
Comments
Post a Comment