Jump to content


Photo

POST / GET / REQUEST-ing data


  • Please log in to reply
3 replies to this topic

#1 matfish

matfish
  • Members
  • PipPipPip
  • Advanced Member
  • 242 posts
  • LocationUK

Posted 11 September 2006 - 11:06 AM

Hi-ya,

Is POST better than GET in regards to a login script? Obviously GET you can enter the string in the brower address bar but they would need the correct username/password and ID's, but is there a way around POST? With post - it doesnt allow you to do that in the address bar?

Thanks

#2 Wintergreen

Wintergreen
  • Members
  • PipPipPip
  • Advanced Member
  • 107 posts

Posted 11 September 2006 - 11:14 AM

Post requires a form using method=post, so it should be 'safer' than get I guess, but as long as you check the username and password typed by the user for bad input, there should be no problem.  I mean the only difference in this case would be that they hadn't typed the username and password into the boxes.  One other thing, if your login check is on a separate page, then unless they know the name of the page then no one can really do much

#3 matfish

matfish
  • Members
  • PipPipPip
  • Advanced Member
  • 242 posts
  • LocationUK

Posted 11 September 2006 - 11:15 AM

Thats cool - thanks for your reply.

#4 tarenberg

tarenberg
  • New Members
  • Pip
  • Newbie
  • 2 posts

Posted 11 September 2006 - 03:18 PM

You should use the Postr method for security reasons. Since the log in info appears in the address bar it is visible to everyone.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users