Originally posted by drawmack
Post is a touch harder to spoof. To spoof a get all I have to do is play with the address bar. To spoof a post I have to make up a form. Since the essence of security is to make it take longer then it's worth to break into something, and not to make it break in proof, then this would be a first line of defense against hackers. But only a very thin first line.
...since we all know drawmack's a hacker 😉
Yeah, drawmack's right. But get also does have it's advantages...great for search engines, or any kind of search you have to perform.
Post is good for security, and also for uploading files, as you cannot upload a file with the get method, or it's really not a good idea to try. (Correct me if I'm wrong.)
Lastly, don't try to invent methods. 'cookie' is not a method. Neither is 'by_screwing_around_with_the_server'. 😃