4 ms·

Using GET to delete is just asking to have a search crawler wipe your entire site. Not only is this not RESTful, it violates the RFC.

• fnid2 17y ago
  Not requiring a username and password to delete is just asking to have your entire database deleted by a click happy anonymous web browser. "Ooo... look! I can delete whatever!... Okay..." click click click click...
  • nzmsv 17y ago
    ...and that's why I shouldn't post at 2am :)