Dave's Brain

Browse - programming tips - whats more secure http get or post

Date: 2001dec3, Updated: 2011jan23

Q.  What's more secure HTTP's GET or POST?

A.  They both send the user-entered data as plain text
(unless you are using SSL).

With GET the user sees when he entered (including hidden variables)
in the URL in his browser's address bar.  URLs have a practical
length limit so GET should not be used when there is tons of
data.  Also a messy URL is ugly.  But this really isn't a security issue.

In conclusion: they're both about they same for security.

More info
http://0x2fn.blogspot.com/2011/01/lets-end-these-silly-ideas-about-http.html
What this info useful to you? You can donate to say thanks

Add a comment

Sign in to add a comment
Copyright © 2008-2012, dave - Code samples on Dave's Brain is licensed under the Creative Commons Attribution 2.5 License. However other material, including English text has all rights reserved.
Advertisements: