Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Security: Brute-forcing GET-requests by URL?

what should my concerns be if I we're about to make an application that handles logins the following way:

http://api.myApp.example/printSomething/username/password/

How insecure is it compared to a normal login page that are based on POSTed user details (username+password)? Is there a difference?

Thanks

like image 614
Industrial Avatar asked Nov 29 '22 19:11

Industrial


1 Answers

Simply don't do that. Use POST method instead of that. You should never allow sensitive info in URLs.

like image 134
Sarfraz Avatar answered Dec 01 '22 09:12

Sarfraz