note 121901 added to tutorial.forms

It is worth noting that GET request parameters can be cached while POST request parameters are not. Meaning that if a password is GETted it is stored at various points on the way to the server (Your browser and anyone it's sharing info with, the people manning the firewall at the Org that is receiving the GET, the server logs, etc.) While it is true that HTTPS encrypts the URL and GET request parameters, nothing guarantees that there is not a Web Application Firewall (that decrypts all traffic going into the Org for inspection) and is logging user info or that one will be implemented in the future at your org. Logs in plain-text are (hopefully) a LOT easier to compromise than a database of hashed passwords. So if you're managing sensitive information, it's best to use POST. ---- Server IP: 208.43.231.9 Probable Submitter: 201.134.69.125 ---- Manual Page -- http://php.net/manual/en/tutorial.forms.php Edit -- https://master.php.net/note/edit/121901 Del: integrated -- https://master.php.net/note/delete/121901/integrated Del: useless -- https://master.php.net/note/delete/121901/useless Del: bad code -- https://master.php.net/note/delete/121901/bad+code Del: spam -- https://master.php.net/note/delete/121901/spam Del: non-english -- https://master.php.net/note/delete/121901/non-english Del: in docs -- https://master.php.net/note/delete/121901/in+docs Del: other reasons-- https://master.php.net/note/delete/121901 Reject -- https://master.php.net/note/reject/121901 Search -- https://master.php.net/manage/user-notes.php