Skip to content

GET or POST

An action deletes a user's account. A developer implements it as a GET request so it can be triggered by a link.

What is wrong with this?