The difference between a GET and a POST request is
-
It does not matter, the web serve will treat all GET requests as POST requests
-
The information in a POST request cannot be manipulated. It is possible to change a GET request
-
A GET request is sent when requesting information; A POST request is sent when sending information
-
The data is sent in the body of the POST request and in the URL in a GET request
The key technical difference is where parameters are transmitted: GET sends data in the URL query string (visible in browser history and logs), while POST sends data in the request body (not visible in URL). GET requests should be idempotent and safe, while POST can modify server state. Both can be manipulated by attackers - option B is incorrect.
A GET request encodes its parameters in the URL's query string, while a POST request places its data in the request body, separate from the URL. This affects things like visibility in browser history/logs and typical size limits. Both GET and POST data can, in fact, be manipulated by a client, so that option is a myth rather than a real technical distinction.