3 ms·
If this worked like you think, bad things would happen. Think about all the "?action=delete" or "/logout" links spread all over the internet.
by xentronium 14y ago
If this worked like you think, bad things would happen. Think about all the "?action=delete" or "/logout" links spread all over the internet.
- vampirechicken 14y agoBad things deserve to happen to web app operators who do not protect delete and logout by putting them behind POST[1] request. [1] pedantry - PUT, POST, DELETE implement it however you want. Just don't change database state using GET.