On 1/4/08, Roan Kattouw roan.kattouw@home.nl wrote:
Why was it changed from POST to GET then?
Because GET should be used for idempotent requests such as searches, as specified by the HTTP and HTML standards. There are a variety of reasons for that. A couple directly applicable here are
1) The URL to change the rights for a given user can now be easily copied and linked to directly (e.g., for adding a link in the toolbox of user pages). 2) Refreshing the page won't give an annoying and unnecessary warning.
In general, user agents treat GET requests as idempotent and POST requests as non-idempotent, as the standard specifies, and it's overall a good thing to do what user agents expect.