What do you think about GET & POST method in the side of security?
-
POST is more secure than GET.I think it's a misguided belief.
-
Answer:
Both GET and POST Requests can be read by an evesdropper / wiretapper when using HTTP (and not HTTPS). All the parameters of a GET Request can also be read in all situations when the URL is revealed / cached / stored: by someone looking over your shoulder and reading the address line in your browser by someone using your browser after you, by looking into the history by people running proxies you use / are forced to use without even knowing it Use https everywhere!
Brigitte Jellinek at Quora Visit the source
Other answers
Both POST and GET are equally unsafe. Even if POST doesn't send data as part of the URL like GET does, I can still see everything clear as daylight with Fiddler, and I'm pretty sure you can see post data with Firebug as well (or insert_your_favourite_web_debugger_here). If security is your concern then use https (that's http covered by Secure Socket Layer).
Andrei Cristof
None of them is really safer than the other. All requests can be assessed, and replicated. Your safest bet for security stuff is following REST conventions and using GET only for serving data, POST for creating stuff, using csrf protection, and https
Kapil Verma
The reason most developers feel that POST is safer than GET is that in GET all the data is displayed in the url. When we use POST, all the data is present in the headers, and hence its more difficult than GET to get those details. When we use GET, all those details shall be saved in browser history and even in server logs, and that is a security issue. But for a good attacker, finding out information from the headers is an easy task. So its better to use SSL along with POST to secure your data.
Robin Thomas
Related Q & A:
- How can we get SBJSON connectionDidFinishLoading method inside array data in another class?Best solution by stackoverflow.com
- If we end up building a base on moon, what do you think will be a, if any, beneficial side effect for mankind?Best solution by Yahoo! Answers
- What are the steps of the Half-reaction method for Balancing redox Reactions?Best solution by ChaCha
- What's a good free site to post stuff on?Best solution by Yahoo! Answers
- What do Muslims think about "Israel and Palestinian Arabs living in harmony and peace side by side?Best solution by Yahoo! Answers
Just Added Q & A:
- How many active mobile subscribers are there in China?Best solution by Quora
- How to find the right vacation?Best solution by bookit.com
- How To Make Your Own Primer?Best solution by thekrazycouponlady.com
- How do you get the domain & range?Best solution by ChaCha
- How do you open pop up blockers?Best solution by Yahoo! Answers
For every problem there is a solution! Proved by Solucija.
-
Got an issue and looking for advice?
-
Ask Solucija to search every corner of the Web for help.
-
Get workable solutions and helpful tips in a moment.
Just ask Solucija about an issue you face and immediately get a list of ready solutions, answers and tips from other Internet users. We always provide the most suitable and complete answer to your question at the top, along with a few good alternatives below.