The POST method offers more security, because the data you send to the server is not URL-encoded
See the below examble,
<html>
<head>
<title>POST</title>
<script language = “javascript”>
var XMLHttpRequestObject = false;
if (window.XMLHttpRequest) {
XMLHttpRequestObject = new XMLHttpRequest();
} else if (window.ActiveXObject) {
XMLHttpRequestObject = new ActiveXObject(“Microsoft.XMLHTTP”);
}
function getData(dataSource, divID, data)
{
if(XMLHttpRequestObject){
var obj = document.getElementById(divID);
XMLHttpRequestObject.open(“POST”, dataSource) ;
XMLHttpRequestObject.setRequestHeader(‘Content-Type’,
‘application/x-www-form-urlencoded’);
XMLHttpRequestObject.onreadystatechange = function()
{
if (XMLHttpRequestObject.readyState == 4 &&
XMLHttpRequestObject.status == 200) {
obj.innerHTML = XMLHttpRequestObject.responseText;
}
}
XMLHttpRequestObject.send(“data=” + data);
}
}
</script>
</head>
<body>
<H1>POST</H1>
<form>
<input type = “button” onclick = “getData(‘samplepost.aspx?data=1′, ‘DisplayHere’)”>
<input type = “button” onclick = “getData(‘samplepost.aspx?data=2′, ‘DisplayHere’)”>
</form>
<div id=”DisplayHere”>
</div>
</body>
</html>
In samplepost.aspx Codebehind,
if(Request.QueryString.Count!= 0){
string data1=Request.QueryString["data1"].ToString();
if(data1 == “1″)
{
Response.Write(“Message1″);
}
string data2=Request.QueryString["data2"].ToString();
if(data2 == “2″)
{
Response.Write(“Message2″);
}
}
Hope this Helps,
Happy Coding,
Comments are closed.