Php framework-php post form submission requires token. Do I need token to get url parameters in get mode to delete the post form?

Php post form submission requires token. Do I need token to get url parameters in get mode to delete the post form? Example: www. aaa. comdelpost. php? Id2 should delete the record whose id is 2 in the background. If a malicious user sends this link to the Administrator, the Administrator is in the login status, then... php post form submission requires token,

Do I need token to get url parameters in get mode to delete them?

Example: www.aaa.com/delpost.php? Id = 2

To delete a record whose id is 2 in the background,

If a malicious user sends this link to the Administrator and the Administrator is in the logon status, does the Administrator accidentally delete this article, so do he need token?

Www.aaa.com/delpost.php? Id = 2 & token =

Reply content:

Php post form submission requires token,

Do I need token to get url parameters in get mode to delete them?

Example: www.aaa.com/delpost.php? Id = 2

To delete a record whose id is 2 in the background,

If a malicious user sends this link to the Administrator and the Administrator is in the logon status, does the Administrator accidentally delete this article, so do he need token?

Www.aaa.com/delpost.php? Id = 2 & token =

My personal suggestion is that the token Generation Method is determined by the program, and there are achievements and gains.
Determine the transmission mode based on post and get
In addition, add verification in the generated token to determine whether the passed token is consistent with the current ip address or user, so as to avoid unnecessary deletion or modification.
For deletion, I usually use ajax for submission, and post for ajax submission.

You can search for the RESTful software style. There is a problem with using get for such delete operations. The main function of get is to obtain data.

In the past, the Post method was basically used for deletion. You should change the method to the POST method for deletion, or you can put the token into the Head for transmission verification.

-------- About RESTful --------------
After RESTful is introduced, the command becomes
GET (SELECT): Extracts resources from the server (one or more ).
POST (CREATE): CREATE a resource on the server.
PUT (UPDATE): UPDATE resources on the server (the client provides the complete resources after the change ).
UPDATE: UPDATE resources on the server (the client provides the changed attributes ).
DELETE: deletes resources from the server.