Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

GET parameters I understand, but POST as well? As in the form contents? I'm finding it hard to believe you. By default?


Why is that so shocking? It logs both.


Shocking because it will produce extremely large amounts of data, makes the logs extremely security-relevant, and probably breaks all kinds of privacy laws. E.g. in the EU a user has a right to request that a company delete all data they have collected about him. So you'd have to go through your logs and purge all request data from that user - possible, but likely to be overlooked.


GET params are a part of the URL. POST params aren't.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: