Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Why would you let an anonymous visitor to delete a data just by clicking a link?


The obvious example is a wiki.


The implicit expected behaviour of clicking a link is that of a GET - i.e. not updating or deleting data. Delete actions should be a POST submit on a form.


In theory, theory and practice are the same. In practice, they are not.




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: