[snip]
 for $_GET[], I found indirect references
(documentation of other subjects that use $_GET[]  and $_POST[] )
but no documentation focusing directly on either.

Is there on line documentation specifically dedicated to these two
phenomena?
[/snip]

This is more of a general web programming question (see the info at
http://www.w3c.org) GET and POST are two different methods of moving
data from client to server. The GET method utilizes the URL for passing
data and is limited in size (I forget the total number of characters
allowed in the URL). It is also makes spoofing a little easier. Let us
say I am an employee of a company and my app designers have done a poor
job at security. I go to employee information at

http://www.foo.com/employee.php?eid=jsmith

If I have some snap and I want to see some other employee's info I can
then type it into the URL

http://www.foo.com/employee.php?eid=bstreisand

POST removes the information from the view of the user, and IIRC you can
pass tons of information to the server.

The rules for usage come down to this - A little common sense goes a
long way. There are really no specific rules. For web apps at my company
I set the rules, I have seen other companies with other rules for the
use of these two.

--
PHP General Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to