-- Christian Szardenings <[EMAIL PROTECTED]> wrote
(on Wednesday, 06 December 2006, 04:35 PM +0100):
> > I would highly encourage you to delete via POST, not GET--regardless of
> > user permissions.
> 
> why do you recommend that? Is deleting by GET some kind of security 
> issue? Or is it just a 'usability' improvement (e.g. don't delete 
> 'again' when user hits the back button) ?

Well, for one, if your site gets indexed, you don't want a spider going
through and deleting records...

-- 
Matthew Weier O'Phinney
PHP Developer            | [EMAIL PROTECTED]
Zend - The PHP Company   | http://www.zend.com/

Reply via email to