4 ms·
The article lists several lessons learned from this, but really there's only one huge issue: stop using GET to modify state that the user cares about! Use POST!
by sketerpot 18y ago
The article lists several lessons learned from this, but really there's only one huge issue: stop using GET to modify state that the user cares about! Use POST! It's not hard! Or rather, it's less hard than dealing with the subtle problems that crop up when you use GET when you should have used POST.
- simonw 18y agoWhile that's good advice generally, it's not enough to protect you from CSRF attacks like the Amazon wishlist one.