Re: When GET = POST?

[Adrian Wiesmann <awiesmann () swordlord org>]

> ASP offers both Request.Querystring & Request.Form which only deal
> exclusively with data from GET & POST operations respectively.  For ASP
> when you observe GET variables being used where only POST'd variables
> should be applicable it will always come down to lazy (or at least
> uninformed) programmers as there *are* ways to avoid this problem.

It sounds very bad, but quite a few ASP developers I have seen did not
know that there are several methods. It's not about speed or architecture,
it's more about not knowing or that everybody around is not doing it
properly. It is so much easier with the catch all function - which is also
in multiple programming books...

Anyway, to come back to your question. Do penetrate such a possible
vulnerability, there are so many alike-vulnerable Web-Applications out
there...

Regards,
Adrian