note 35417 deleted from tutorial.forms by sean
| From: | sean@php.net | Date: | Sat, 30 Jul 2005 20:35:19 +0000 |
| Subject: | note 35417 deleted from tutorial.forms by sean | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-92777@lists.php.net to get a copy of this message | ||
Note Submitter: RobertMaas at YahooGroups dot Com
----
Regarding debate over GET and POST method:
One disadvantage of the POST method is that you can't
bookmark it in a URL. So if you want ot make a URL
that bookmarks both the WebPage and some form contents,
you have to use the GET method, i.e. webpage?formcontents.
Warning, the Apache server logs the complete URL including
formcontents in a file that anyone can read, so be sure
never to include a password in the form in GET method,
regardless of whether bookmarked or onetime.
For example, my CGI site has a login form, and I have
a bookmark for specifying my own (rather long) e-mail
address, but do *not* include my password in that bookmark,
rather I click on the link and get the login form with
my e-mail address already filled in but I still have
to type my password, and of course it's a POST instead
of GET form when I then submit it with password.
http://shell.rawbw.com/~rem/cgi-bin/
LogForm.cgi?id=RobertMaas@YahooGroups.Com
(Cliki complained it was too long so I had to split it.)