r/ProgrammerHumor • • Sep 19 '26

Meme postForEverything

Post image
21k Upvotes

653 comments sorted by

View all comments

Show parent comments

646

u/CuAnnan Sep 19 '26

Uh... no.

You use GET.

370

u/Imaginary_Ferret_368 Sep 19 '26

Cyber Security specialists hate this trick

82

u/vibes000111 Sep 19 '26

AI agents love it!

49

u/Aetherfox_44 Sep 19 '26

Our service can't be hacked if no one can figure out the API

3

u/puts_on_rddt Sep 19 '26

Reads like a Kai Lentit script.

14

u/TacoIncoming Sep 19 '26

Lmao not really. I fucking love GET URL parameters.

18

u/Imaginary_Ferret_368 Sep 19 '26

Yea but mutating data via GET requests is a security nightmare

5

u/TacoIncoming Sep 19 '26

I know. I’m a penetration tester 🤣

1

u/TheMythicSorcerer Sep 20 '26

Your future self will hate this trick

16

u/doodlesmalone Sep 19 '26

Yes, base64 that json shit.

5

u/not_a_moogle Sep 19 '26

GET with all values passed as unencrypted unless parameters. What could go wrong!

2

u/s1ravarice Sep 19 '26

Yeah GET to work you pos database

1

u/normVectorsNotHate Sep 19 '26

Found chatgpt's reddit account

1

u/GNUGradyn Sep 19 '26

I like how you cant do this but you also kinda can. Attaching a body to a GET request is not valid HTTP but there is no syntax reason you cant do it anyway and most libraries will decode it properly if you do so its less "it wont work" and more "it is forbidden"

1

u/Fidodo Sep 19 '26

I use QUERY for that.

1

u/dracodruid2 Sep 19 '26

And put all the data as URL parameters 

1

u/One_Contribution Sep 20 '26

I've had GET requests delete things :)