what should my concerns be if I we're about to make an application that handles logins the following way:
http://api.myApp.example/printSomething/username/password/
How insecure is it compared to a normal login page that are based on POSTed user details (username+password)? Is there a difference?
Thanks
Simply don't do that. Use POST method instead of that. You should never allow sensitive info in URLs.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With