Difference between GET and POST methods
HTTP
HTTP (Hyper Text Transfer Protocol ) is developed to interact with servers through request-response protocol.
A web browser is a client and the program is on the server in order to interact we use the HTTP.
The are two popular http Methods
- GET
- POST
The GET method
The get method uses a url string to send the data to the server using the following syntax.
/test/demo_form.asp?id1=var1&id2=var2
Some of the features of the GET
- It can be cached
- It will remain in the browser history
- They can be bookmarked
- Don’t use this while dealing with the sensitive data
- It has the length restrictions
- It is used to retrieve data
The POST method
The post method uses a secure port to transfer the data to the server.
POST /test/demo_form.asp HTTP/1.1
Host: codingsec.net
name1=value1&name2=value2
Host: codingsec.net
name1=value1&name2=value2
- They are not cached
- They are not present in the browser history
- They can’t be bookmarked
- No restrictions in the data length.
| GET | POST | |
|---|---|---|
| BACK button/Reload | Harmless | Data will be re-submitted (the browser should alert the user that the data are about to be re-submitted) |
| Bookmarked | Can be bookmarked | Cannot be bookmarked |
| Cached | Can be cached | Not cached |
| Encoding type | application/x-www-form-urlencoded | application/x-www-form-urlencoded or multipart/form-data. Use multipart encoding for binary data |
| History | Parameters remain in browser history | Parameters are not saved in browser history |
| Restrictions on data length | Yes, when sending data, the GET method adds the data to the URL; and the length of a URL is limited (maximum URL length is 2048 characters) | No restrictions |
| Restrictions on data type | Only ASCII characters allowed | No restrictions. Binary data is also allowed |
| Security | GET is less secure compared to POST because data sent is part of the URL
Never use GET when sending passwords or other sensitive information!
| POST is a little safer than GET because the parameters are not stored in browser history or in web server logs |
| Visibility | Data is visible to everyone in the URL | Data is not displayed in the URL |
Nhận xét
Đăng nhận xét