Multiple choice technology security

The difference between a GET and a POST request is

  1. It does not matter, the web serve will treat all GET requests as POST requests

  2. The information in a POST request cannot be manipulated. It is possible to change a GET request

  3. A GET request is sent when requesting information; A POST request is sent when sending information

  4. The data is sent in the body of the POST request and in the URL in a GET request

Reveal answer Fill a bubble to check yourself
D Correct answer
Explanation

GET requests append parameters to the URL in the query string, making them visible in browser history, logs, and bookmarks. POST requests send data in the message body, which is not logged or cached in the same way. This distinction is crucial for security - sensitive data should use POST to prevent exposure through URL logging or browser history. Both can be manipulated; the security difference is in visibility, not immutability.