The Get method is less secure because it will encode all the vars into the
URL so after the submit your link will look like this:
http://www.mysite.com/formresponse.php?id=3&name=Gigi&firstname=alexandru

Do not submit in this way the forms containing very important data like
username, passwords, or others because it will travel as URL encoded. The
post method will negotiate with the server and send the infos into the
negotiation time. Both of the method are insecure, if you need security you
should use the SSL, but the GET method is less secure then the POST.

Anyway the difference between them is the way the data is sended to the
server, the GET method cannot submit more then 65535 characters into the URL
and you cannot submit files. There are no other differences (after my
knowledge)

Hope it helps you,


--
-------------------------------------------------
Cristian MARIN - Developer
InterAKT Online (www.interakt.ro)
Tel:         +4021 312.53.12
Tel/Fax:  +4021 312.51.91
[EMAIL PROTECTED]
"Harpreet" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
Cristian,

You said by using the method in a form as  Get in place of Post it allows me
to use the back button without getting the error message:
Warning: Page has Expired The page you requested was created using
 information you submitted in a form. This page is no longer available.
As a security precaution, Internet Explorer does not automatically
resubmit your information for you.

I changed the post to a GET and it seems to work just right. Do I loose
anything by using a get in place of a POST. How r they both different.
Please help.

Thanks





"Cristian MARIN" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
> This is not an error, this is a security issue:
> Your form has passed the form variable thru 'post' method and when you are
> hitting back button or reloading with a JScript the history page you see
the
> message because the IE do not re-submit automatically the form because is
a
> security leak.
>
> If you really don't want to see the message appearing you have to specify
in
> the form the "<post method='get' action='... >" and this will
automatically
> submit the form once again.
>
> --
> -------------------------------------------------
> Cristian MARIN - Developer
> InterAKT Online (www.interakt.ro)
> Tel:         +4021 312.53.12
> Tel/Fax:  +4021 312.51.91
> [EMAIL PROTECTED]
> "Harpreet" <[EMAIL PROTECTED]> wrote in message
> news:[EMAIL PROTECTED]




-- 
PHP Windows Mailing List (http://www.php.net/)
To unsubscribe, visit: http://www.php.net/unsub.php

Reply via email to