Question

Explain why applications must use the appropriate form action method for the data that is sent to the web server.

Answer 1

The <form> element defines how the data will be sent. All of its attributes are designed to let you configure the request to be sent when a user hits a submit button. The two most important attributes are action and method.

There are two methods for the data that is sent to the webserver.

1. GET-

GET is one of the most common HTTP methods

• GET Parameters are included in URL
• GET requests remain in the browser history
• GET requests can be bookmarked
• GET requests should never be used when dealing with sensitive data
• GET requests have length restrictions
• GET requests are only used to request data (not modify)

2. POST

POST is used to send data to a server to create/update a resource.

• POST parameters are included in the body
• POST requests do not remain in the browser history
• POST methods are used for the password or username page form or any sensitive data
• POST requests cannot be bookmarked
• POST requests have no restrictions on data length

If Applications use GET method for the senstive data then any one can see your Password and username or any senstive data in the url when submitted. So if Applications uses senstive data then POST Method is recommended.