Re: Back button error

From: Date: Tue, 15 Jul 2003 08:29:39 +0000
Subject: Re: Back button error
References: 1  Groups: php.windows 
Request: Send a blank email to php-windows+get-20792@lists.php.net to get a copy of this message
The Get method is less secure because it will encode all the vars into the URL so after the submit your link will look like this: http://www.mysite.com/formresponse.php?id=3&name=Gigi&firstname=alexandru Do not submit in this way the forms containing very important data like username, passwords, or others because it will travel as URL encoded. The post method will negotiate with the server and send the infos into the negotiation time. Both of the method are insecure, if you need security you should use the SSL, but the GET method is less secure then the POST. Anyway the difference between them is the way the data is sended to the server, the GET method cannot submit more then 65535 characters into the URL and you cannot submit files. There are no other differences (after my knowledge) Hope it helps you, -- ------------------------------------------------- Cristian MARIN - Developer InterAKT Online (www.interakt.ro) Tel: +4021 312.53.12 Tel/Fax: +4021 312.51.91 cristic@interakt.ro "Harpreet" <harpreet@crispincorp.com> wrote in message news:015201c34a56$c83c1710$6001a8c0@harpreet... Cristian, You said by using the method in a form as Get in place of Post it allows me to use the back button without getting the error message: Warning: Page has Expired The page you requested was created using information you submitted in a form. This page is no longer available. As a security precaution, Internet Explorer does not automatically resubmit your information for you. I changed the post to a GET and it seems to work just right. Do I loose anything by using a get in place of a POST. How r they both different. Please help. Thanks "Cristian MARIN" <cristic@iakt.rdsnet.ro> wrote in message news:20030617171447.79925.qmail@pb1.pair.com... > This is not an error, this is a security issue: > Your form has passed the form variable thru 'post' method and when you are > hitting back button or reloading with a JScript the history page you see the > message because the IE do not re-submit automatically the form because is a > security leak. > > If you really don't want to see the message appearing you have to specify in > the form the "<post method='get' action='... >" and this will automatically > submit the form once again. > > -- > ------------------------------------------------- > Cristian MARIN - Developer > InterAKT Online (www.interakt.ro) > Tel: +4021 312.53.12 > Tel/Fax: +4021 312.51.91 > cristic@interakt.ro > "Harpreet" <harpreet@crispincorp.com> wrote in message > news:03ca01c334f3$980dbbc0$6001a8c0@harpreet...

« previous php.windows (#20792) next »