Re: Back button error
| From: | Cristian MARIN | Date: | Tue, 15 Jul 2003 08:29:39 +0000 |
| Subject: | Re: Back button error | ||
| References: | 1 | Groups: | php.windows |
| Request: | Send a blank email to php-windows+get-20792@lists.php.net to get a copy of this message | ||
The Get method is less secure because it will encode all the vars into the
URL so after the submit your link will look like this:
http://www.mysite.com/formresponse.php?id=3&name=Gigi&firstname=alexandru
Do not submit in this way the forms containing very important data like
username, passwords, or others because it will travel as URL encoded. The
post method will negotiate with the server and send the infos into the
negotiation time. Both of the method are insecure, if you need security you
should use the SSL, but the GET method is less secure then the POST.
Anyway the difference between them is the way the data is sended to the
server, the GET method cannot submit more then 65535 characters into the URL
and you cannot submit files. There are no other differences (after my
knowledge)
Hope it helps you,
--
-------------------------------------------------
Cristian MARIN - Developer
InterAKT Online (www.interakt.ro)
Tel: +4021 312.53.12
Tel/Fax: +4021 312.51.91
cristic@interakt.ro
"Harpreet" <harpreet@crispincorp.com> wrote in message
news:015201c34a56$c83c1710$6001a8c0@harpreet...
Cristian,
You said by using the method in a form as Get in place of Post it allows me
to use the back button without getting the error message:
Warning: Page has Expired The page you requested was created using
information you submitted in a form. This page is no longer available.
As a security precaution, Internet Explorer does not automatically
resubmit your information for you.
I changed the post to a GET and it seems to work just right. Do I loose
anything by using a get in place of a POST. How r they both different.
Please help.
Thanks
"Cristian MARIN" <cristic@iakt.rdsnet.ro> wrote in message
news:20030617171447.79925.qmail@pb1.pair.com...
> This is not an error, this is a security issue:
> Your form has passed the form variable thru 'post' method and when you are
> hitting back button or reloading with a JScript the history page you see
the
> message because the IE do not re-submit automatically the form because is
a
> security leak.
>
> If you really don't want to see the message appearing you have to specify
in
> the form the "<post method='get' action='... >" and this will
automatically
> submit the form once again.
>
> --
> -------------------------------------------------
> Cristian MARIN - Developer
> InterAKT Online (www.interakt.ro)
> Tel: +4021 312.53.12
> Tel/Fax: +4021 312.51.91
> cristic@interakt.ro
> "Harpreet" <harpreet@crispincorp.com> wrote in message
> news:03ca01c334f3$980dbbc0$6001a8c0@harpreet...