Re: Re: Are $_POST and $_GET interchangable?
| From: | Five | Date: | Wed, 10 Mar 2004 14:45:28 +0000 |
| Subject: | Re: Re: Are $_POST and $_GET interchangable? | ||
| References: | 1 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-180033@lists.php.net to get a copy of this message | ||
"Jay Blanchard" <jay.blanchard@niicommunications.com> wrote in message news:C8F323573C030A448F3E5A2B6FE2070B02A2DD@nemesis...
[snip]
for $_GET[], I found indirect references
(documentation of other subjects that use $_GET[] and $_POST[] )
but no documentation focusing directly on either.
Is there on line documentation specifically dedicated to these two
phenomena?
[/snip]
This is more of a general web programming question (see the info at
http://www.w3c.org) GET and POST are two different methods of
moving
data from client to server. The GET method utilizes the URL for passing
data and is limited in size (I forget the total number of characters
allowed in the URL). It is also makes spoofing a little easier. Let us
say I am an employee of a company and my app designers have done a poor
job at security. I go to employee information at
http://www.foo.com/employee.php?eid=jsmith
If I have some snap and I want to see some other employee's info I can
then type it into the URL
http://www.foo.com/employee.php?eid=bstreisand
POST removes the information from the view of the user, and IIRC you can
pass tons of information to the server.
The rules for usage come down to this - A little common sense goes a
long way. There are really no specific rules. For web apps at my company
I set the rules, I have seen other companies with other rules for the
use of these two.
I googled a few different queries and can't find any direct documentation.
http://www.w3c.org has a lot of info, but none that I can
find' on this subject (they need a 'search this site' option)